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I Var Readers. 

Rahul got busy with a major electronics event this 
time, so I've been asked to fill in. You may already 
be aware of the many BIG annouiu ements made 
in February. First, the Symbian source code was 
released as open source. Second, Intel's (or the Linux 
Foundation's) Mob I in and Nokia's Maemo project 
merged as MeeGo. Third, Android was all over the 
place at the Mobile World Congress 2010, held at 
Barcelona. You'll get to read about all this in the FOSS 
Bytes section. However, one BIG news that you won't 
get to read anywhere else in this issue, and which has 
nothing to do with mobile operating systems, is the 
release of KDE 4.4. 

I'll get to the excuses on why we didn't (or 
couldn't) cover it. later. This release is a grand one with 
lots of feature additions — most of which aren't even 
that obvious. For example, the ability to group multiple 
windows together, enabling different apps to appear as 
tabs on K Win's title bar. 

When I first tried this feature while testing out one 
of the beta releases a couple of mouths back, I couldn't 
figure out the need for it. If you look at it. the task 
manager lists all the open windows of apps that are 
running— so, what's the use of further grouping windows 
together to have litem appeal as tabs on top of the screen. 
If I want to switch to another tab to access another 
application, I can do that by either using the Alt-Tab 
keystroke, or clicking the respective apps on the task bar. 

Fast forward to today, and I find this feature a must- 
have! Why? Because I've learned of a way to use it. Some 
apps open two or more windows at a time — for example, 
Kopete, VirtualBox, etc. The task manager will typically 
group these apps together to save some real estate — but I 
don't really have much control on how they are grouped. 
Then tliere is OpenOffice.org, on which I typically have 
a spreadsheet and a few documents open, at once. Now, 
with the KWin tabbing feature. I can manually group the 
windows that I am simultaneously working on — helps me 
become more organised :-) 

Another cool feature is the Nepomuk-Akonadi-Strigi 
combo. Things are still rough, but they don't have that 
big question mark about their future anymore — I am 
speaking from the point of view of a regular user, who 
just wants to gel the work done. For example, for the 
first lime, 1 did manage to use the desktop search quite 
easily — it always had been a pain. I still had to google 



10 find ways to fix some issues with both Akonadi and 
Strigi, but I'm sure distro packagers would be able to 
iron out these problems easily. 

Anyway, an editorial is only a page long so I have 
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One BIG news that you won't 
get to read anywhere else in this 
issue, and which has nothing to 
do with mobile operating systems, 
is the release ofKDE 4.4. 

to cut this short. (How Rahul manages to speak his 
mind every month, within just one page, is a mystery 
to me.) Since 1 don't have space to talk about all the 
things 1 like and dislike in this release. I'd request you 
to visit the 'Visual Guide to KDE 4.4' at www.kde.org/ 
announcements'4.4/guide.php. The reason we avoided 
talking about it in FOSS Bytes is because the above URL 
is a much better resource. 

Why I couldn't write a review is because the month 
was short, and 1 wasted too much time in compiling a 
KDE 4.4 live DVD using SUSE Studio, which never saw 
the light of (lay, Oiu friend. Botidhayan Gupta, told me 
it worked on his desktop — in fact, it even worked on my 
desktop, wonderfully. But it just failed to recognise the 
keyboards and touebpads of all the laptops we tried it 
on — there's some package 1 kept missing out on, which I 
wasn't able to figure out :-( 

The idea was to include Firefox 3.6, OpenOffice. 
org 3.2, VirtualBox 3.1, multimedia apps and codecs, 
and the whole of KDE 4.4 — basically a-one-stop-shop 
for your desktop needs. Let's see if we can figure out lite 
hardware compatibility issues by next month and bundle 
the Live DVD. 

(How do you end an editorial? Oh welt...) 

Besl, 

A l a mi DutUi 

Assistant Editor. LFY 

at imu.d alt wv I y i in! ia.com 
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Maemo 

• _j The Maemo review in the February issue is excel lent, 
coupled with the a [tide mi developing applications for 
it. All the other content also adds up to a solid issue. 
Congratulations and keep up the great work! 

— Saurav Sengupfa, saurav.public@gmail.com 

ED: we're glad you liked it. Although we wished we had had 
more time with the device to include a lot more details than we 
were able to, 

OpenLDAP in-depth 

._ I I f ou nd ih e an ic Ic on (J pen I. D A P q u i I e interest i ng. 
'<-** First, thanks for taking the initiative on this. For five 
years 1 worked relentlessly on LDAP since the tutorials 
available in the market were not that great, as far as good 
examples and practical sessions an? concerned. I learnt so 
many things the hard way. And (here's so much more to learn 
iti this vast ocean called LDAP. 1 don't know if you'd planned 
to cover the following topics in future articles. I just wanted to 
mention certain areas that I found difficult to set up and 
haven't been successful at, as yet: 

1. Setting up LDAP over SSL. and how to make applications 
like Postfix (SMTP) use LDAP, 

2. Making containers in OpenLDAP to manage access to 
machines (desktops/servers). 

3. Making DHCP and DNS servers sync with OpenLDAP 
to automatically update new machines being added to the 
network via DHCP. 

4. Editing stapd.conf with any form of GUI instead of 
manually editing it. ACLs can be only activated after the 
next restart of slapd and it is so much of a trial and error 
method to add ACLs. 

I know these subjects that I am asking for help on are of 
a very advanced level. But these topics have haunted me for 
years, especially when they are so easily do-able in Microsoft 
Active Directory. If you have any documents regarding these, 
please pass them on. You needn't cover them in LFY since the 
material would be really vast. 

— Bejoy Abraham Maihews, brjnet@yahoo.com 



Article author, Varad Gupta, replies: Thanks for your 
wishes and words of encouragement. I hope the other readers 
feel the same too. As for your queries... 

1. I believe an article on SSL/TLS and its workings would be 
important before we cover LDAP over SSL. Maybe, after 
the basic LDAP series ends (there are at best one or two 
more articles) SSL can be covered, and followed up with 
LDAP over SSL. 

2. I guess we can do this in the third article, where we might 
cover Samba with OpenLDAP, followed by the Windows 
clients and creating the containers in a fashion thai AD 
does. I can't commit as of now because of lime constraints, 
but this is a brilliant idea and I hope to cover this. 

3. In the current version (2,4), ACLs are added in the 
directory data, instead of slapd. Maybe instead of working 
on a GUI, we could extend the article for Fedora Directory 
Server — all these features are present ihere. and I guess we 
should do (his... 

4. Again, it's a Windows and Dynamic DNS,' DHCP link 
thing — a very good idea, similar to AD, but will require a 
certain amount of understanding on the pan of the reader 
regarding dynamic DNS updates through Dl ICP. Let 

us see - 1 cannot commit on this either, and it will also 

depend on the editors a( LFY. 

Unfortunately, 1 do not have any documents on these topics, 
handy. I have started writing these articles in /.FY to force myself 
to develop content within specific (leadlines. I shall pass this mail 
to the editor at LFY and maybe we could cover itiese topics over 
the course of the next few months. Rut I shall look for good URLs 
on the Net and pass them on to you for sure. As soon as I write 
something on these, whether f.FV prints it or not— I shall pass it 
on (0 you. Many (hanks for your truly valuable suggestions :-) 

ED: We love the topics and are definitely game for it :-D 

Online subscription 

I've been a regular reader of LINUX For You since 
2009. 1 am from Agartala and here (he problem is 
regarding (he availability of the magazine — sometimes I get 
the magazine in the third week of ihe month on the 
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Your favourite Linux Magazine is 

now on the Web, too. 

LinuxForU.com 
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newsstands. So I was planning to subscribe to the magazine. 
Bui due to my olfice work (tours, I'm uoi able to manage this. 
1 was wondering if LFY had an online subscription procedure 
involving netbanking or a credit/debit card — it will be easier 
for readers in this pan of India. 

— Anupam Jama t id, anupamjdmdtia@gmail.com 

ED: You can ceriainty subscribe online using your credit card 
01 www. linuxforu. com/s ubserihe' to- ihe-pri nt-edit ion •of-linux- 
for-you. Also, thanks for updating us about the delay in the 
magaiine reaching Agartata— we'll look into what's causing it 
to arrive late. 

'A Voyage to the Kernel' PDFs 

r -_j I'm a new reader of your magazine. I love ii, bul there 
£-»* are some problems— many of the articles are in serial 
format. Obviously, I've missed the earlier parts of these 
features. Could you let me know where I could get them? 

— Misaj, misaj8@gmail.com 

1 am .in engineering student at I IT Patna and am a regular 
k-** reader of y ou r ma ga/. i ne . 1 great ly appreciate the work 
thai you do in promoting open source in a world that needs it so 
badly. Of late, I have been tiying to learn Linux kernel 
programming (which is, of course, a pan of the curriculum) and it 
is one thing that interests me the most. I would like to get the 
entire set ol PDFs of the *A Voyage to ihc Kernel' series, if it is 
available for download, or else, please be kind enough to mail me 
ihe same as it would be of great help. 

— Sidharth Sharma, ims.sbarma@gmaU.com 



• -^j I like the 'Voyage to the Kernel' series and it has 
*-* motivated me to subscribe to the LFY magazine. On 
the LFY website. I could find only articles for Days II, 9, 8 ,7, 
etc. I would like to know if there is a link where 1 could find 
all tire articles that I've missed out on (from Day 1, to your 
latest article). 

— Thyagu Sundantnwortby. thyag.js@gntail.com 

ED: We understand that our Web team is lagging behind— 
we 'II push them and try to make it current as soon as possible. 
In the mean time, we hope the earlier PDFs have reached 
your mailbox. It took us a bit of time to dig through our 
archives and extract the articles. 

Fonts used in code snippets 

(.^1 I'm a subscriber and regular reader of LFY. I'm also a 
«— »* staunch supporter of the open source concept. I have 
been particularly intrigued by the font used for the computer 
code published in LFY. Everyone everywhere uses some 
monospace typewriter font for code, whereas that's not been 
the case at LFY. 

This might seem silly at first, but programmers are 
used to seeing code in monospace fonts. Usage of any 
other font makes it hard to read code. Even though you 
have made efforts to highlight it in blue, I'm afraid it has 
not helped much. Even text editors such as Vim. Emacs. 
Gedit and Kale all display ihe text in monospace. I'm sorry 
if I am being a little hard on you, but I think it requires 
immediate change. 

— Vikas V. Jots, jois,vikas0>gmail.com 
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Largest UPS 

Manufacturer of India 



D SERIES 

High Pamr IGBT UPS U«o 1000 KVA 

GIGALINE 

IGBT UPS Upto 200 KVA 

MAXILINE 

IGBT UPS Upto 100 KVA 



climbing from the t Oth to the 3rd position 
in |ust 5 years" 



CREENLINE 

On .no UPS Upto 6 KVA 



SMARTLINE 

OWtoe UPS WW 3 KVA 

POWERLINE 

CTV - SERVO UPW 1000 KVA 



► Full Range of UPS Systems ► Wide Customer Base ► All India Sales & Service Network 

Unfline Energy Systems (Pvt) Ltd. Urvlinc House, Ramesh Market. East of Kailish, New Delhi - 110 065 Tel. J - Oil ■ 4666 Mil, 2646 9031. 2646 9108 
W 6T 63793 Otemul : 99400 49477 98M 42866, Dehndun 93972 724*9 Jaipur : 98290 60772 ttmnpur 94151 32093,93368 55700 Kolkua ; 94330 33S55, 98833 59262 
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You said it. . . 




ED: WA'fls, we must say you nailed us there. We regret that 
somehow we kept using a sans serif font /or code snippets 
ever since our last design overhaul till the last issue, dated 
February 2010. However, thanks to your eye for detail, we 've 
changed that with none other than the free (as in freedom) 
Liberation Mono font face for codes. And, while we 're at 
it, we've also changed the font face for article text (besides 
headlines, and sub-heads) to Liberation Serif :■) Let us know 
if you notice the difference. 

2009 LFY archive in CD 

• -fci Once again your bureau has proved Us meule by 
£» bundling the 12009] LFY archive in the CD, With this 
bundled magazine pack, now 1 can easily share the content by 
mailing it lo people who still can't avail the magazine. 

— Ambuj Dubey, dubeyambuj@in.cam 

ED: Ivfe're glad you find it useful :-) 

FreeBSD and sysadmin articles 

• _ i Recently, using [he DVD thai came with LFYs 



February 20 1 issue, I insiallwl Free USD lo a virtual 
platform in Celeron 1.73 GHz. with 512 MB RAM, and a 12 
GB HDD. The installation was smooth. Being a Linux user for 
so many years, it was a bit different trying the C shell. Only 
after the installation, could I understand why Linux has 
become so popular. 

The server configuration pan in your magazine is quite 
interesting and is helpful for budding sysadmins like me. I search 
online and try things out also. I ' ve got a few requests for you: 



(a) Can you kindly publish how to configure the X server in 
FreeBSD? By default, it doesn't boot graphically. 

(b) Please provide an article on security and ethical hacking. 

(c) An article on programming with Qt4 using Python/Perl, etc. 

(d) Penetration OSes like Backtrack, etc, but not on multi- 
boot DVDs. 

(e) Less pages for the gadgets which many users cannot buy! 
(Spending 30-35K for the N900, however useful and 
cool it may be, is probably out of reach for many of your 
readers.) 

i i ) Some article on cloud computing, grid computing, 
firewalls, routers and home office networks, where users 
like me can make use of my old Pentium 800 MHz, 160 
MB computer. 
— Pat ash Roy, palash7J7@gmail.com 

ED: We 'II definitely try to work on the articles you 've 
requested in the coming issues. As for the gadget reviews 
we've recently started, if you notice, we concentrate more 
on the OS and its features, rather than going deep into the 
hardware. Besides, a subset of our readers has long reqi/ested 
us to lake up IJnux-powered gadget reviews. IVe are trying to 
balance everyone s interests :•) ESt*^, 



Please send vour coniiretils of suggestions to: 
Trie Editor 

UNUX FOR YOU Magazine 
0-87/1, Okrta Industrial Area. Rvsse I, Now DeH* 1 10O20 

Phone: 011-26810601/02/03. Fax: 011-26817563 
Email ltyedil@ety>nde.«Kn, Website: www.openlTis.Oorn 
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NILINE 



POWER TO COHTROL POWER 
AN ISO 9001 & 14001 CERTIFIED COMPANY 

Umiine has emerged as the fastest growing UPS 
Company of India. 

As leaders in IGBT Technology, Uniline products 
provides impeccable Power Continuity Solutions 
that any business environment needs to keep up its 
progress, uninterrupted. 



Fax - Oil - 2MB 144? E-roail - ufMline@udilmt.pn hatch Offrw ; AhnwJabad : 997*3 1W Buyfilora ■ 59/20 2993 Bhopti : 98260 93/07. 98270 68ffi<! Bhubuwnmr 943/0 Wt/i. 
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Moblin + Maemo = MeeGo 

Intel and Nokia are merging ilieir Moblin and Maemo software platforms to create 
MeeGo, a Linux-based software platform thai will support multiple hardware 
architectures across a wide range of device segments, including pockeiable 
mobile computers, netbooks, tablets, media phones, connected TVs and in- vehicle 
infotainment systems. The platform is expected to accelerate time-to- market for 
a range of new I nter net- based applications and services, besides exciting user 
experiences. MeeGo-based devices from Nokia and other manufacturers are 
expected to be launched later this year. 

MeeGo builds on the capabilities of the Moblin core OS and its support for 
a wide range of device types and reference user experiences, combined with the 
momentum of Maemo in the mobile industry and the broadly adopted Qi application 
and Ul framework for software developers. 

MeeGo also unites the worldwide Maemo and Moblin applications ecosystems 
and open source communities. For developers, MeeGo extends the range of target 
device segments for their applications. Using Qt (or application development 
means that they can write applications once and easily deploy them on MeeGo and 
across other platforms, like Symbian, for example. Developers can begin writing 
applications for MeeGo in Qt immediately. The first release of MeeGo is targeted 
for the second quaner of this year. Keep an eye on meego.com, hosted by the Linux 
Foundation, for updates. 

Have you updated to Firefox 3.6 yet? 

Mozilla delivered Firefox 3.6 on January 21, 2010, powered by an updated rendering 
engine. Gecko 1.9.2. The latest version promises "...rn.nn improvements for Web 
developers, add-on developers, and users. This version is also faster and more 
responsive than previous versions and has been optimised to ran on small device 
operating systems such as Maemo." 

The release notes [w\w.tmtilta-eurape.Qrg/eii/firefox/3.6/releosenote$\ indicate tlie 
following important feature additions: support for a new type of theme called Personas: 
protection from out-of-date plug-ins; open, native video can now be displayed full 

screen and supports 
poster frames: 
improved: JavaScript 
performance, 
overall browser 
responsiveness, and 
start-up time; support 
for new CSS attributes 
such as gradients, 
background sizing. 
and pointer events; 
support for new 
DOM and HTML 5 
specifications; and 
a lot more. 




Your Firelox, Your Style 








'We're Linux' returns for 
the second year in a row 

The Linux Foundation has announced 
the second 'We're Linux" video 
contest. The tlteme of the video 
contest is to demonstrate what Linux 
means to you and to inspire others to 
try it. According to the announcement, 
"The contest is calling all community 
members and amateur filmmakers to 
share with the public what a 30-60 
second Linux-focused spot for the 
Super Bowl might look like." 

The last date for submission 
of videos is on April 4, 2010. The 
winners are going to be announced 
at this year's 4th annual Linux 
Foundation Collaboration Summit. 
The prize Is a Linux-powered 
laptop and a free trip to this year's 
LinuxCon. scheduled for August 10- 
12, 2010. at Boston. 

Faster start-up times 
with 0pen0ffice.org 3.2 

The OpenOffice.org Community has 
released a new version of its office 
productivity suite — -version 3,2. The 
new or improved features include: 
faster start-up limes; improved 
compatibility with open standard 
(ODF) and proprietary file formats; 
improvements to all components. 
particularly the Calc spreadsheet, 
with over a dozen new or enhanced 
features; the Chart module (usable 
throughout OpenOffice.org) that has 
had a usability makeover and offers 
new chart types; and many more. 
Florian Elfcnbcrger, marketing 
project lead of OpenOlfice.org, 
explains: "Some people are currently 
locked in toother personal productivity 
tools— maybe by corporate IT 
policy, or by a lie-in to other legacy 
software. For everyone else, we want 
Open0ffice.org to be the 2010 office 
software of choice, and 3.2 takes us 
another step towards ili.it goal." 
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Learn How to Hack into*ANY* Password! 
E-mail Accoun ts, Websites, or Mobiles... in just SECONDS. 




Order On in« « www.sec ret hacking.! 
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r tf MXtonfW Vaskn (he*) 



New * Third Edition - WTimesMore Powerful Ethical Hacking BOOK 
What's New in 3rd Edition: 

■ How Hackers Create Undectable irojansand kcyloggers. 

■ How (lackers Hack Paypal account andcredil caret Hacking (fully vntiacable). 

■ Votp SSL Revere Engineering Database server, Website & DNS Hacking. 

I earn Advanced Hacking ( Me tasploit. Remote Hacking, Phone rtxking, Reverse fngnieering, VIRUS R&D) 
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Free Video 
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Leo impact 
Security 



LEO IMPACT SECURITY SERVICES PVT LTD 

T8 Mjlpj ifjltmwl. N*»t SJP OffK* 
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Symbian open sourced 

On February 4, the Symbian Foundation completed 
the open source release of the source code for the 
most widely- used smartphone platform. The move 
has been completed four months ahead of schedule. 
Symbian has been developed for more than 10 years 
and has shipped in more than 330 million devices 
around the world, before being open sourced. 

Any individual or organisation can now take, 
use and modify the code for any purpose, for 3 
mobile device or for something else entirely. This 
strategic move provides the Symbian ecosystem 
with greater potential for innovation, faster 
time -to- market and the opportunity to develop on 
the platform for free. Symbian 's commitment to 
openness also includes complete transparency in 

future plans, including the publication of the platform roadmap and planned features, 
up to and Including 201 1. Anyone can now influence the roadmap and contribute 
new features. Visit www.symbian.org for more details. 

You can now download all 108 packages containing the source code from 
Symbian 's developer website ftiny.symbian.orig/oper)). under the terms of the F.clipsc 
Public License and other open source licences. Also available for download are the 
development kits for creating applications (the Symbian Developer Kit) and mobile 
devices (the Product Development Kit), These kits are compatible with Symbian A 3. 
i lie very latest version of the platform, which is now fully open sourced and will be 
' feature complete' during Ql of this year. 

Now, run SUSE Studio in-house 

Novell has announced the SUSE Appliance Toolkit for ISVs and enterprises. 
The Toolkit is a collection of tools designed to make building, testing, updating 

and configuring appliances, fast and 
easy. Developers can choose to build 
their appliances on either SUSE Linux 
Enterprise or openSUSE. 

it features an on-site version of 
Novell's appliance-building solution, 
SUSE Studio, and new management 
tools that enable ISVs and enterprises 
to reduce software development time, 
installation cycles and maintenance 
costs. The Toolkit includes SUSE 
Studio Onsite (a local, behind-the-firewall version of the online appliance 
creation tool), SUSE Studio Online, WebYaST (a tool for enabling remote, 
Web-based configuration of the SUSE Linux Enterprise), SUSE Lifecycle 
Management Server (a tool for authentication, entitlement and access control 
that makes it easier to distribute software patches and updates), and support for 
KIWI (the image creation tool behind SUSE Studio). 

For ISVs, the SUSE Appliance Toolkit is an essential pan of the SUSE Appliance 
Program, which enables ISVs to build, update, configure and go-to-market with 
fully-supported software appliances. The SUSE Appliance Toolkit is available at www. 
novell.com/toolkit. 




Novel, LPI partner on 
Linux training and 
certification 

Novell and the Linux Professional 
Institute (LPI) have announced 
an international partnership to 
standardise their entry- level Linux 
certification programs on LPIC- 
1. Under this program, Linux 
professionals who have earned 
their I Pit - 1 status will also satisfy 
the requirements for the Novell 
Certified Linux Administrator 
(CLA) certification. In addition, 
Novell Training Services has 
formally agreed to include the 
required LP1C-I learning objectives 
in its CLA course training material. 

Adoption of Linux is accelerating 
as the industry pursues cost-saving 
solutions that deliver maximum 
reliability and manageability. A 
2009 global survey of IT executives 
revealed that 40 per cent of survey 
participants plan to deploy additional 
workloads on Linux over the next 12- 
24 months, and 49 per cent indicated 
Linux will be their primary server 
platform within five years. 

'This partnership represents the 
strong support the LPI certification 
program lias within die wider IT and 
Linux community. This historical 
support has included contributions 
from vendors such as Novell and 
has assisted LPI to become the most 
widely recognised and accepted 
Linux certification," said Jim Lacey, 
president and CEO of LPI. More 
information about acquiring dual 
certification status can be found at 
Nove 1 1 : WWW no vell.com/training/ 
ceninfo/cia, and at line I. PI: www.tpt. 
org/cla. 
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Citrix, Novell team up on virtualisation 

Cilrix Systems and 
Novell have announced 

•1 i nl I, i hi )i, it inn tli.it 

expands choices for 

customers through 

increased visualisation 

interoperability and 

new assessment tools. 

Through this new 

partnership. Novell has 

certified SUSIi Linux 

Enterprise Server as a 

'Perfect Guest' running on Citrix XcnServer and both companies will provide 

joint technical support to customers. As a result, the more than 4,500 enterprise 

applications certified as Novell Ready for SU5E Linux Enterprise Server 

are now Citrix Ready, community-verified, when running in a SUSE Linux 

Enterprise Server guest virtual machine on XenServer. 

The collaboration is strongly supported by leading technology vendors across 
ihe IT community such as HP: "Customers require a seamless transition between 
virtual and physical environments to lower their risk of system downtime." said 
Scott Farrand, vice president, Infrastructure Software and Blades, HP. "This 
new capability from Citrix and Novell, when combined with industry-standard 
HP ProLiant server platforms, wilt allow organisations to simplify virtualisation 
management while extending the value of their hardware." 

Linus digs the Nexus One 

Linus Torvalds hates phones; maybe that's why you've never got a call from him. 

But he recently fell in love with Google's Nexus One, which is powered by the 

very kernel he developed. So, let's hear about 
why he hales phones, from the man himself. On 
his blog, he explains, "...they arc irritating and 
disturb you as you work or read or whatever — 
and a cellphone to me is just an opportunity to 
be irritated wherever you are. Which is not a 
good thing." 

So, did he have a change of heart recently? 
He bought a phone and wrote, "I have to 
admit, the Nexus One is a winner. I wasn't 
enthusiastic about buying a phone on the 
Internet, sight unseen, but the day it was 
reported that it finally had the pinch-to-zoom 
thing enabled. 1 decided to take the plunge. 
I've wanted to have a GPS unit for my car 
anyway, and I thought that Google navigation 
might finally make a phone useful." 

He added, "I no longer feel like I'm dragging 
a phone with me 'just in case' I would need 
to get in touch with somebody — now I have a 

useful (and admittedly pretty good-looking) gadget instead. The fact that you can 

use it as a phone too is kind of secondary." 




Red Hat's fourth annual 
Innovation Awards 

Red Hat has announced its fourth 
annual Red Hat Innovation Awards 
to be presented at the 2010 Red 
Hal Summit and J Boss World, 
co-locaied in Boston, June 22- 
25. 2010. The Innovation Awards 
recognise and honour the creative 
use of Red I fat and JBoss solutions 
by customers, partners and the 
community. Categories for the 2010 
Innovation Awards include: 

• Optimised solutions — in 
recognition of striking 
performance, scalability and/or 
usability enhancements delivered 
with open source solutions 

■ Superior alternatives — in 
recognition of the most 
successful migration from 
proprietary solutions to open 
source alternatives 

■ Extensive ecosystems — in 
recognition of the use of Red 
Hat or JBoss' expanding partner 
ecosystem to create innovative 
architectures based on open 
source solutions 

■ Carved out costs — in 
recognition of customers who 
have leveraged open source 
solutions to significantly cut 
costs and extract added value 
from existing systems, and 

• Ou tst an (I i ng ope n source 
architecture— in recognition 
of the use of Red Hat, JBoss 
and partner offerings to create 
innovative architectures based 
on open source solutions. 
Submissions for the Innovation 

Awards will be accepted until 
April 15, 2010. Each submission 
will be evaluated by a panel of 
representatives and industry leaders. 
For more information, or to submit 
a nomination, visit: www.rednar. 
conVtmrnvotionawords. 
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Mobile World Congress 2010: It was Android all over the place 

The blue-eyed boy of this year's Mobile World Congress — held in Barcelona from 
February 15-18, 20)0 — was indeed Android. Except for Microsoft, which showcased 
its new Windows Phone 7 series, most were busy showcasing their devices powered by 
Google's operating system - the number of Android- powered devices was reportedly 
more than 50. Hie fact that Google CEO, Eric Schmidt, delivered a keynote speech at the 
conference, speaks for itself, 

Taiwanese mobile manufacturer, IITC. announced its two new mobile phones — Legend 
and Desire, which are to support Flash for the first time. An updated version of I lero was 
jIwi announced. Legend lias somewhat similar features to Hero, wilh an 81.2 mm (3.2- 
inch) display and a slightly faster processor — 600 MHz compared to the earlier 528 MHz.. 
Instead of a plastic body. Legend uses a unique aluminium frame and replaces the mint 
trackball with an optical trackpad. However, the big one from HTC was, of course, Desire, 
This one borrows a number of features from the Google Nexus One: a 94 mm (3.7 inch) 
AMOLED display and a I GJ Iz Qualcomm Snapdragon processor. Moreover, i ITC adds 
the custom Sense U I to Android 2.1 and includes support for Flash 10.1. 

Apart from HTC, Acer also updated its Liquid line up. with its new Acer I iquiil 
E. This is basically an upgrade to Acer Liquid, which was priced at Rs 24,990 and 
powered by the older Android 1.6 OS. The new Liquid E will run on the latest 

Android 2.1. The latest version offers a new keyboard 

layout with extended dictionary support, besides an 

updated browser wilh support for HTML 5. The Liquid 

E weiglis only 135 grams and has dimensions ol 1 15 

x 62.5 x 12.5 mm. The phone runs on a Qualcomm 

Snapdragon 8250 processor clocked at 768 Ml iz, and 

offers an 88.3 mm (3.5-inch) touchscreen. Additionally, 

it packs in a 5 MP camera with auto focus. Acer also 

announced two new devices — bcTouch El 10 and the 

be! ouch E400. These are entry -level handsets that run 

Android 1.5. The El 10 offers a 71.1 mm (2.8-inch) 

screen, a 416 MHz processor and a 3MP camera. The 

E400 runs Android 2, 1 , a 600 M I Ik processor and a 

larger 81.2 mm (3.2-inch) screen. 

Mobile phones apart, some companies also 

showcased new laptops and tin books. As announced 

by Dell in CES 2010 in January, the Dell Mini tablet 5 will come with the Android 1.6 operating 

system along with a 127-mm (5-inch) touchscreen, 5MP camera and built-in Wi-Fi and 3G. IIP 

showcased its Compaq Airline 100 smanbook that is powered by a I GHz Snapdragon processor, a 

16 GB SSD hard disk, and lot more. 

Well, we have only written about a fraction of the Android-based offerings that were on display. 

So visit www.mobileworldcongress.com/index.htm for more information. 





Adobe enters LiMo 

Adobe and the LiMo Foundation have announced that Adobe has joined the global consortium of mobile phone industry 
leaders to bring Flash to the LiMo platform. Support for Flash within the LiMo platform will enable developers and content 
providers to create applications that can run on LiMo devices. As a member of the LiMo Foundation, Adobe supports 
the development of an independent, collaboratively developed handsel platform that is commercially driven by some of 
the largest operators and OEMs in the industry, including LG, NEC, NTT DOCOMO, Orange, Panasonic, Samsung, SK 
Telecom, Telefonica, Vodafone and Verizon Wireless. 
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fit I have jusi bought a new 
Compaq 520 laptop. It comes 
with a Web camera and an 
inbuilt microphone with 
speakers. I have installed 
Ubuntu 9.10 on it that came 
bundled with I I Y. Every thing 
is working fine but I am unable 
to test my Web camera. I have 
checked dmesg and can make 
out (hat Ubuntu has recognised 
my camera. Can you please 
suggest a solution? 

— Arnab Sen, Ghaziabad 

You'll neetl a webcam applied) ion 
)hat works on Ubuntu. I would suggest 
you install Cheese — I think it should 
have been installed by default. Cheese 
uses your webcam to take photos and 
videos: it works with GNOME 2.28 and 
is built on GStreamer with GTK. Cairo 
and D-Bus, Just in case it's not already 
available on your system, install M as 
follows (provided you're connected to 
the InU'i net ): 

...and then: 



(!) I like to fiddle around with 
various distros and would like 
to employ vi realisation for the 
purpose. However, my system's 
processor does not have stipporl 
for hardware visualisation. 
My system has a 2 GHz Core 
2 Duo, a 5400 RPM hard disk 
and 3 GB of DDR2 800 MH/. 
RAM. I am currently running 
32-bit Kubuntu 9.10 on it. I 
was wondering if you could let 
me know which software-based 
visualisation solution will 
provide the best performance 
for my needs (from among (he 
FOSS ones, of course :-)), i.e., 
enable the best performance of 
the guest OS. 

— Saurav Sengupta, Chandigarh 

Have a look at Virtual Box. 1) 
comes under two licences. The fully 
open source version is available in 
the software repository of most Linux 
distros. Its project website, www. 
virtualbox.org, hosts the closed-source 
binaries (which have a few additional 
features). You can also try iheir IRC 
or forum at www.virwalbox.org/wiki/ 
Community for any help needed while 
installing and configuring it. 

(!) 1 have an old assembled 
desktop PC with a P IV 1.7 GHz 
processor and 1 GB RAM. The 
motherboard is Mercury with 
an Intel 845 chipset. I was trying 
to install openSUSE 11.1 on the 
system bul wasn't successful. 
The installation went fine for me 
but after the first reboot, I could 
not get the graphical screen to 
configure my system. I have tried 
restarting several times but the 
problem remains the same. I 



have installed the same OS on my 
latest Core 2 Duo-based system 
and it is working flawlessly. Is 
there a way to make it work on 
my old system, too? 

— Sudhakar M, Bangalore 

openSUSE should work flawlessly 
On your old system too. 1 would suggest 
you set the Frame Buffer Size to 8 MB 
in the video section of your system 
BIOS. After setting it, try booting your 
system— your X should work. 

(!> I have an Acer E725 
(eMachine) that conies with a 
Pentium Dual core processor and 
1 GB of RAM. I have installed 
Ubuntu 9.10 on it. Everything 
works fine but I am unable to 
configure the wireless feature 
on it. Ispci shows that it has a 
Broadcom Wireless (BCM 4211) 
but System - Administrator - 
Hardware Drivers shows that all 
the drivers work. 

— Sonali Roy, New Delhi 

To resolve this issue I would suggest 
the following steps: 

■ Place your Ubuntu 9.10 Live CD in 
the drive 

■ Open the Synaptic package manager 

■ Go to Sett fugs - Repos itories 

■ Check the option that says 
Installable from CD. 

■ Refresh 

■ Now search and install the bcmwl- 
kernel-source package 

• Restart your computer 

Next, go to System — Administrator 
- Hardware Drivers, Select 
Broadcom STA and Broadcom 
fwcutter, click on Activate and restart. 
Configure your wireless network and 
surf the Web. E3("\ 
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Share your expertise by speaking 
on such topics as... 

• Developing Web Applications Using Open Source 

• Developing Mobile Applications Using Open Source 

• Developing Embedded Systems (or Device-Level Software) 
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Dual- and quad-core processors will soon be old hat, with industry majors 
working towards six-core desktop CPUs and eight- and 1 2-core server 
processors, not to forget the prototypes with dozens of cores. Ongoing research 
also promises highly scalable and customisable heterogeneous multi-core 
products in the future, complemented with the right parallel programming tools to 
take advantage of these capabilities. 




?ave you ever wished you had four 
kinds mi you timid wurk faster? 
A similar scmimem amongst 
computer engineers was what led 
to the development of multi-core processors 
more than a decade ago. 

A mulli-core processor is essentially a 
chip that lias more than one processor (core) 
attached 10 it. By engaging these multiple 
cores using the right software, a computer can 
do more in less time. 

Tltere is a great demand for mulli-core 

processors across various application domains 
ranging from general -purpose and embedded 
computing 10 networking, digital signal processing 
(DSP) and graphics. Over the past few years, 
multi-cores h.ivc become the norm, with dual- and 
quad-core processors being taken for granted even 
in the desktop and mobile computing spaces. 

Of course, we all know [hat in die computing 



world, users are never satisfied. I lowever fast 
their computers are, they want more speed. 
When they find four cores mundane, they will 
have six -core processors, but soon even that will 
not be enough. Every need will be met by I he 
industry, with more research, more innovations 
and more products, h is an unending cycle, and 
no technology is permanent. 

Lei us therefore slop at this moment in time 
and capture ihe curreni state of affairs in multi- 
core processors. The situation here is quite 
similar 10 the Cola Wars, with Intel and AMD 
trying to outdo each other with more cores. 

A six-mare chariot to pull your computer 

Six- and even eight-core processors, per se. are 
not news any more, with server- focused products 
such as Intel's Xeon and AMD's Opieron being 
quite popular. However, il is interesting to note 
that Intel recently demonstrated a six-core 
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processor for the desktop segment (hat is currently being ruled 
by dual- and quad-core processors. This processor might be 
launched sometime in March this year. 

The processor, codeiiamed Gul flown, will use Intel's 
32-nanomeire (nm) fabrication technology and Westmere 
architecture, which means it will also feature some of 
the interesting power-saving techniques used in Intel's 
45iwn products. The power management functions of this 
architecture will ensure power savings by limiting the 
power consumed by the idle cores not being utilised by the 
applications running at any point of time. 

Apart from thai, the chip has a larger data cache — 12 MB of 
L3 compared to lite 4 MB present in ils dual-core counterparts. 
As John Morris and Sean Portnoy observe on their famous blog 
on laptops and desktops [blogs./dnet.conVcomputers], this data 
cache, when combined with the extra cores, would result in a 
chip that is larger and contains 1.17 billion transistors. Intel says 
that it uses some of those extra transistors to speed up tasks like 
data encryption and decryption. 

The six-core processor will also be available in a dual- 
socket server version. 

AMD too plans to launch ils six-core desktop CPU this 
year. Codenamed Thuban. this processor will pack six cores 
and a DDR3 memory controller onto a 45nm die. It is believed 
that Thuban will be backwards-compatible with existing A M3 
and AM2+ motherboards, which gives a flexible upgrade path 
to existing AMD users. 

Six more (or the servers 

If six cores is the current high score for desktop CPUs, server- 
focused processors can boast of six more. 

AMD's new server processor, codenamed Magny Cours, 
is designed for two- and four-socket servers and uses faster 
DDR3 memory. This processor will be offered in the market 
as Opteron 61 00, in both eight- and 12-core versions. Both 
chips will be manufactured using a 45nm manufacturing 
process. The company has also hinted that by 201 1, Magny 
Cours will be replaced with Interlagos — a more powerful 
32nm chip lii.il will tome with 12 and I H cores based on 
AMD's Bulldozer microarchitecture. 

The company has also revealed a new Opteron chip 
(codenamed Lisbon) for servers with one or two processor 
sockets. This will be available in four- and six-core versions 
as the Opteron 4100 series. By 201 1 , Lisbon will be succeeded 
by Valencia — a 32nm chip offering six and eight cores based 
on Bulldozer. 

A team with multiple capabilities 

"Last year, we launched the six-core Istanbul processor; 
we are currently working on the eight -core and 12-core 
processors, and plan to launch them by the first half of 2010. 
Apart from this, we are also planning a six-core desktop CPU. 
While these homogeneous multi-core processors will continue 
to evolve over the next couple of years, you will see a 
movement towards heterogeneous multi-core processors in tin" 
future," comments Vamsi Krishna, senior manager. Technical, 



Coming up... 
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plications and thread -aware execution environments, to make 

better use ot mult i -co re hardware 



AMD. "AMD has plans to release its first heterogeneous 
multi-core processor (codenamed Fusion), where we Integrate 
multiple x86 cores and graphical processing unit (GPU) cores 
on a single die. 1 his will be the beginning ot a new multi-core 
revolution in the future." 

Deep down, the idea behind Fusion is to enable a mix-and- 
tiiatt h strategy at the silicon level, through a broad range of 
design initiatives. AMD will provide a range of application- 
specific cores that can easily be combined and heaped onto 
a processor die and fabricated at a low cost. A quad-core 
processor might contain different combinations of cores, say, 
two genera I -purpose cores and two specialised processor 
cores, or one general-purpose core and three specialised cores, 
and so on. Tills implies that a processor can be put together 
from heterogeneous cores, based on the end-use and workload, 

Krishna adds, "The Fusion project completely leverages the 
multi-core concept and Direct Connect architecture, enables a 
homogeneous programming model for all AMD products, and 
standardises the coprocessor interface for on-die and platform 
connectivity. Fusion-based processors, with the CPU and CPU 
integrated in a single architecture, should make the life of 
software programmers and application developers much easier." 

Cloud on a chip 

System -on -chips are old news. Now. here is a whole cloud on 
a chip — Intel's brainchild with 48 cores. 

"Most recently, we announced the prototype, single-chip 
cloud computer (SCC). This research chip contains the most 
Intel architecture cores ever integrated on a silicon CPU chip — 
48 cores. It incorporates technologies intended to scale multi- 
core processors to 100 cores and beyond, while consuming 
less electricity than two standard household light bulbs," says 
Vasaiuha Erraguntla, engineering manager, Intel India. 

"Architectural ly. the chip resembles a small cluster or 
'cloud' of computers on a chip. It was designed as a concept 
vehicle for parallel software research. We will be working 
with industry research and academia partners to further 
parallel computing research using this vehicle." 

You might recollect that the same team also successfully 
tested an 80-core teraflop processor a few years ago. 
Following that, the team was confident of the success of the 
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Intel's single chip cloud compute) ISCCI has 48 Intel cares and runs at as lew as 25 walls 



SCC. However, this chip seems more complex, with a much 
larger die size, system-level complexities and line challenges 

of i! 45nm physical design to boot. Tiro success of this chip 
will make processors more scalable than you ever thought 
possible, and also accelerate multiple-core software research 
and advanced development. 

According to the company, future laptops with 
processing capability of this magnitude could have 'vision' 
similar to humans who can see objects and motion as it 
happens, with high accuracy. Imagine, for example, a laptop 
with a 3-D camera and display giving you virtual dance 
lessons or showing you a "mirror' of yourself wearing the 
clothes you want to buy online. Twirl and turn to watch how 
the fabric drapes and how its colour complements your skin 
lone. This kind of interaction could eliminate the need for 
keyboards, rcmoic controls or joysticks in gaming. Some 
researchers believe computers may even be able to read 
brain waves, so simply thinking about a command, such 
as the words you warn typed, would execute it without the 
need for speech. 

We can expect more breakthroughs from Intel's stable, 
considering the amount of research being done in this space. 
"On the hardware side, we explore scalable multi-core 
architecture thai integrates streamlined processor cores and 
accelerators using a fast, energy-efficient, modular core-to- 
core infrastructure. Our research is also focused on memory 
sharing and stacking to provide a high-bandwidth, flexible 
cache and memory hierarchy that supports many simultaneous 
threads, fairly and efficiently; and on high-bandwidth I/O and 



communications that balance compute demands with the I/O 
and network demands, within tlte platform power and cost 
budgets," lists Euan gum la. 

The soft side of success 

As far as multi-core computing goes, more than half the 
reason for success depends on the ability of the program to 
efficiently harness the immense parallel c otnpiiiint; power ot 
the processor. "To take advantage of the increasing number 
of cores, efficient load balancing of software is required. In 
addition, we need to identify and come up with programs 
and applications for these systems, to improve performance. 
It is also important for OEMs to strike a balance between 
performance and power consumption. Weal AMD under sun id 
this and are working with our partners to address these 
issues." says Vamsi Krishna. 

Intel, too, has taken several initiatives 10 educate 
developers on the specific challenges and techniques of 
parallel computing, in order to enable them to make good use 
of multi-core systems. 

The multi-core related software research vision at Intel 
includes ". . .model -based applications that use tera- scale 
capabilities to comprehend data, make smarter decisions, 
and make visual experiences look, an and feel real: parallel 
programming tools that empower the ordinary programmer to 
develop applications ihat use parallelism with scalability and 
performance, safely and reliability: and diread-aware execution 
environments that provide real-time performance and power 
management across cores, and scale with increasing thread and 
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core counts," informs Erraguntla. You can find more details at 
http://techresearx:h.intelxom/articles/Tera-Scate/142 1. him. 

More than desktops and supercomputers 

Multi-core processors are becoming an indispensable aspect of 
virtualisaiion too, especially in tint a centres. 

Vamsi Krishna explains, "In the near future, multi-core 
processors will enable data centres to accomplish tasks 
more quickly and with greater energy efficiency. Areas such 
as virtualisaiion are also primed for a boost by multi-core 
processors. As AMD moves to eight- and 12-core platforms, far 
more virtual machine-scan be packed onto each physical server. 
By focusing heavily on power efficiency and virtualisaiion 
capabilities, businesses can now add performance and efficiency 
to iheir business without a significant cost" 

R. Ravichandran. director-sales, Intel South Asia, says, 
"Industry reports point out that there will be approximately 10-15 
billion devices in the next four to five years, and most devices 
like TVs, embedded devices and other consumer electronic 
devices (beyond traditional desktops, notebooks and servers) will 
have a link to the Internet. Given that there will be a proliferation 
of devices in the computing continuum, with rich media and 
video as killer applications, some of the handhelds and smart 
phones will need great computing capabilities that are energy- 
efficiem... and multi-core will also pervade these segments.'* 

Ravictwnclran cites the follow ing examples 10 prove his point: 
" Safer and smarter roads: A number of traffic accidents 
are caused by worn-down car lyres. Intel, along with 
industry players Koniron and ProConiour, has developed 
a lyre- tread-monitoring embedded technology that is 
making roads smarter. Koniron. a member of the Intel 
Embedded and Communications Alliance, has developed 
a camera with an Intel Corc2Duo processor thai captures 
tyre-tread depth as a tyre passes over a specialised grate. 
This technology can alen drivers when I heir tyres need 
replacement to avoid potentially dangerous tyre blow-outs. 
■ Medical imaging with multiple cores: Physicians today 
collect more complex imagery of their patients than ever 
before. In order to accurately diagnose diseases and develop 
treatment strategies in a minimally-invasive manner, new 
imaging modes, methods and hardware are needed. 
In collaboration with the Mayo Clinic. Intel has presented 
a paper titled Mapping High-Fidelity Volume Rendering 
for Medical Imaging 10 CPU, CPU and Many-Core 
Architectures, outlining how medical imaging benefits from 



Multi-core microcontrollers: Powering your car, 
phone and more 



Multi-core technology is no longer confined to high-performance 
computing or even desktop computing, It has entered (he devices 
that we use every day, in the form of multi-core microcontrollers 
that are being extensively used in embedded systems. 

Several companies, including Renesas Technologies. LSI 
Corporation, STMieroelectronics and Freescale Semiconductor, have 
introduced multi-core microcontrollers in trie recent past. While the 
miJti-core chips initially introduced for embedded systems were 
aimed at image processing and other multimedia products with heavy 
processing loads, recent products are targeted at a broad range of 
general -purpose devices. These facilitate the true real-time response 
times required by real-lime control systems, safety-critical applications, 
etc. thanks to their ability to process instructions in parallel. 



parallel processing in the Intel micro-architecture codenamed 
Nehalem. Medical volumetric imaging requires high-fidelity, 
high-performance rendering algorithms. They have now 
achieved performance improvements of more than one order 
of magnitude on a number of large 3-D medical datasets. 

What to expect 

Look into any device a few years down the line and you will 
be sure to find a multi-core processor in it. Specialists in the 
embedded arena, including ARM and RIM, are all launching 
multi-core models of their processors too. 

Multi-core processors have already widened their ambit 
from supercomputers to desktops, mobiles and data centres. 
However, the real success and sustainability of the multi-core 
concept depends on whether it will be ably supported on the 
software front loo, with a proper understanding and execution 
of true parallel programming principles. Considering the 
efforts being made by industry leaders to train developers on 
parallel techniques, this hurdle will be overcome soon, and 
multi-cores will be adopted even more rapidly. ED|*^ 

The article is the cover story in the Monrh 2010 issue of 
Electronics For You magazine. 

/ V 

By: Janani Gopalakrishnan Vikram 



The author s a freelance writer based in Bengaluu She writes on 
a variety ot topes, her lavcuntes be*ig technology, cusine, and Be. 
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Virlualisation and 
Open Source 

What Makes It the Right Match? 



Virtualisation continues to be a buzzword. The idea isn't new in itself; IBM mainframes have always 
had to have a hypervisor. It's in the news now because even simple desktops can now act as virtual 
machine hosts. A lot of possibilities have opened up as a result. Let's take a brief tour of what 
virtualisation means, in its classic sense, and look at why open source virtualisation is going to win. 
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II. wo all know what 
virtualisation is about — we've 
road and heard of it over and over 
again. Bui let's look at it from the 
view point of the open source world, 

Vinualis.it ion means the simulation of a 
computer system, in software. The virlualisation 
software creates an environment for a guest, 
a complete OS, to execute within this created 
world. This means the view thai should gel 
exported to the guesi should be of a complete 
computer system — with ihe processor, system 
peripherals, devices, buses, memory and so on. 
Tin* virtual isaiion software can be strict about 
what view to export to the guest, for example, 
the processor and processor features, types of 
ill-, K i-s. bust", exported to the guest, en . <>r ii 
can be flexible wiih ihe user getting a choke to 
select individual components and parameters. 

There are some constraints 10 creating a 
virtualised environment or a set ol sufficient 
requirements, as lias been noted by Popek anil 



Goldberg in llieir paper on virtual machine 
monitors. 

■ Fidel i ly : So f rwa re run n i ng i n a v in ua 1 1 set! 
environment should not be able to delect it 
is running on a virtualised system. 

■ Containment; Activities within a virtual 
machine (VM) should be contained within die 
VM itself without disturbing ihe host system. 
A guest should not cause the host or other 
guests running on the host to malfunction. 

■ Performance: Performance is crucial to how 
the user sees the utility of the virtualising 
environment. In this age of extremely fasi 
and affordable general-purpose computer 
systems, if ii takes a few seconds for some 
input action to get registered in a guest, no 
one will be interested in using the virtual 
machine at all. 

■ Stability: The virtualisalion software itself 
should be stable enough to handle the guest 
OS and any quirks it may exhibit. 

There are several reasons why one would 
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want vinualisaiion. For data centres, it makes sense to run 
muhiple servers (Web, mail, etc.) on a single machine. 
These servers are mostly under- utilised, so clubbing 
them on one machine with a VM for each of the existing 
machines enables fewer machines, less rack space and 
lower electricity consumption. 

For enterprises, serving users" desktops on a VM simplifies 
management. IT servicing, security considerations and costs, 
by virtue of the reduced expenditure on desktops. 

For developers, testing code written for different 
architectures or target systems becomes easier, since access to 
the actual system becomes optional. For example, a new mobile 
phone platform can be vimialised on a developer machine 
rather than actually deploying the software on the phone 
hardware each time, allowing for the software to be developed 
along with the hardware. The vimialised environment < an also 
be used as validation for die hardware platform itself, before 
going into production, to avoid the costs (hat arise later due to 
changes that might be needed in the hardware. 

There are several such examples that can be cited for 
any kind of application or use-case. It's not impossible to 
imagine a virtual ised system being beneficial anywhere a 
computer is used. 

Now is a good time to get acquainted with some of the 
terms (the mandator* .ilphabel soup) that we'll be using 
throughout the article: 

■ VM -virtual machine 

• VMM - virtual machine monitor 

• Guest OS - the OS that is run within a VM 

■ Host OS - the OS that runs on the physical computer 
system and hosts guests 

• Paravirtualised guest - the guest OS that is modified 10 
have the knowledge of a VMM 

• Full virtual i sat ion - the guest OS is run unmodified in this 
eiiviroiinu'iii 

■ Hypervisor - an analogous term for a VMM 

• Hypercall - infrastructure, via which a paravirtualised 
guest and the VMM communicate 

Types of VMM 

There are several virtual machine monitors available. They 
differ in various aspects like scope, mot i vat ion, and method of 
implementation. A few types of monitor software ate: 

■ ' N at i ve ' hy pervisors: Th ese V M Ms ha ve a n OS assoc ia ( ed 
with them. A complete software-based implementation 
will need a scheduler, a memory management subsystem 
and an 10 device model to be exported to the guest OS. 
Examples are: VMWare ESX server. Xen, KVM, and IBM 
mainframes, fn IBM mainframes, the VMM is an inherent 
part of the architecture. 

■ Containers: In this type of virtual isation. the guest OS and 
the host OS share (he same kernel. Different namespaces 
are allocated for different guests. For example, the process 
identifiers, hie descriptors, etc, are virtualised in the sense 
that a PI D obtained for a process in the guest OS will only 
be valid within that guest. The guest can have a differ em 



user) and (for example, a different distribution) from the 
host. Examples are OpenVZ, FreeVPS and Linux-Vsetver. 
* Emulation: Each and every instruction in the guest is 
emulated. It is possible to run code compiled for different 
architectures on a computer — for example, running ARM 
code on a PowerPC machine. Other examples are qemu 
and pearpc. qemu supports multiple CPU types, and it runs 
ARM code under x8(> as well as v86 under x8G, whereas 
pearpc only emulates lite PPC platform. 

Virtuaiisatiort on x86 

Virtualisiiig lite \Hf> arilliteUuie is dilfiiuh to do since 
the instruction and register sets are not compatible with 
vinualisation. Not all accesses to privileged instructions or 
registers raise a trap. So vv'e eilher have lo emulate the guest 
entirely or patch it at run-lime lo behave in a particular way. 
This was true till about four years back, before vinualisation* 
specific instructions were added to the architecture. 

With the two leading x86 processor manufacturers, Intel 
and AMD, adding virtual isation extensions to their processors, 
visualising the x86 platform seamlessly has become easier. 
The ideas behind their vinualisation extensions are more 
or less the same, with the implementation, instructions and 
register sets being slightly different. 

The new extensions add a new mode, (he 'guest- mode', in 
addition lo the user-mode and kernel -mode that we had (ring 
-1 in addition to the rings 0-3, with the hypervisor residing in 
ring -I). The implementations also enable suppon for hiding 
(he privileged slate. Disabling interrupts while in the guest 
mode will nol affect ihe host -side interrupts in any way. 

Open source visualisation 

Now thai we've seen what vinualisation is about and what's 
needed on the software side to present a virtual machine to a 
guest opera! ing system, let's talk alxwt (he strides open source 
software has been making in this field, 

Xert was the first open-source hypervisor to be announced. 
The Xen project was started when liardware extensions to 
vinualisation were not yet available, and ihe developers took 
i he pa ravinua I isation approach towards visualising a system. 
The Xen team created a new hypervisor, taking bits from 
ihe Linux kernel, lo nm modified Linux guests. A privileged 
l.inux guest called the DomO, has access to the system 
liardware and at bit rales (he access lo physical resources by 
guest operating systems. 

Ihe Xen project got wide acceptance and was backed by a 
large number of companies— developers from IBM, Red Hat, 
Novell, Intel. AMD, all contributed to the Xen code base. It 
was even included in enterprise Linux offerings from various 
distributions as ihe supported vinualisation technology. 

When the hardware manufacturers on x!t(i staned adding 
vinualisation extensions to the processors, unmodified guests 
could be made to run on hypervisors. The deficiencies of the 
x8(j instruction set were masked by these advances. 

With this advancement, along came a new line of 
thought: why have a separate hypervisor, when all a 
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hypervisor has to do is schedule guests, manage memory and 
arbitrate access to hardware? 

The Linux kernel has been doing all of this for years. 
Therefore, the kernel code could easily be leveraged to 
[H'ltnrm .ill ilii'M' tasks. And (he addition ol null' to handle 
(he new CPU instructions and slate would make Linux itself 
function as the hypervisor and host VMs. 

The KVM project was started for doing just this, and 
il was evident by the quick developer acceptance I hat (his 
really is how virtualisation on Linux was finally going to be 
acceptable. The KVM project was announced in late 2006 
and was accepted ihe same year in Linos' kernel tree. On 
(he olher hand, die X en DomQ code has yet (o find upstream 
acceptance. The Xen hypervisor, itself bearing Linux code, 
will always coiiimue lo be a separate project. 

The open source advantage 

A commonly-cited advantage of open source software is the 
'more eyeballs" concept. As more people look at tire code, bugs 
become more obvious and get fixed faster, often before the code 
enters a stable release. This is definitely true. However, there are 
other advantages when it comes to open source software with 
large communities, beyond just more eyeballs. 

If one follows the LWN.net "Who develops Linux" 
articles, it's clear that most of the developers are sponsored to 
work on Linux by companies. Il isn't a big surprise to people 
any more that companies are i mining businesses and making 
profits by relying on open source software. Linux already 
runs on the widest array of platforms — it can run on simple 
embedded devices and also on big supercomputers, including 
everything in between. The developers come from not just 
one part of the world, but from everywhere. The experience, 
culture and insights they all bring in are invaluable. 

Contrast this to a proprietary US maker. Perhaps all 
the developers sit in one campus and are probably used lo 
following a particular train of thought. Just one company 
cannot match the resources (hat SO companies (and, of 
course, die individuals in the community) pul together to 
collaboratively enhance the OS. 

Red I tat. IBM. Novell, Intel, AMD. IIP, Fujitsu. 
Oracle, Nokia and Google, all figure on the latest LWN.net 
compilation for companies that are funding develo|>ers to 
contribute to the Linux kernel. The sheer scale at which the 
development happens is mind-boggling. 

This, however, does not mean that companies can push 
whatever code they want lo into the repositories. Merit 
wins. There is a peer review of all the patches that How in. 
There are people who deeply care about the code that gets 
accepted. Almost all the patches submitted the first lime 
have 10 be adjusted after review comments by others. There 
hardly are patches that go in their unmodified form from 
ihe time they were first sent out for review. In many cases, 
people maintaining subsystems that reject patch submissions 
could be working for the same company that's promoting 
the patches. And there's no love lost. Everyone involved 
understands the prime cause: to create better software. 



People understand this, and the companies involved 
understand this too. 

Now why does all this matter in the virtualisation 
perspective? It's simple. The Linux kernel itself is a 
hypervisor. Any advances in Linux, the operating system, 
arc directly beneficial to Linux, the hypervisor. By using ihe 
K\ M ti>< turnings, ruc-sis miming on lop ot k\ M i an HtfOJ 
ihe benefits immediately when patches gel accepted to Linux. 
KVM guesis can already enjoy the support of M vCPUs (and 
more!), huge-page backed memory, a wide range of memory 
over-commit options, NUMA support and so on. And KVM 
is just four years old. It has taken other projects many more 
years to reach the state ihey currently are in, and even ihen, 
they do not offer some of the features that KVM offers. It's an 
interesting exercise (or (he reader: compare the feature set as 
announced in releases of virtualisation software one year back 
to the current set. The number of features and enhancements 
KVM can provide in one year's lime, ot Iters would only dream 
of achieving in five. 

This comes as no surprise. There are iwo basic mindsets 
at play. First, the UNIX one: 'Do one thing and do it right'. 
The KVM developers just focused on providing the best 
support to exploit ihe hardware support for virtualisation 
and left the CPU scheduling, memory management, etc, 
to Linux. KVM also leveraged ihe QF.ML) project heavily 
lhat provides a device mode). The virtual computer (hat 
gets exposed to the guest is provided by QEMU, and KVM 
developers have heavily updaied the upstream OF.MU code 
to enable it to support modern devices, KVM-based guests 
and a loi of optimisation. 

The second philosophy is to contribute as much as 
possible to upstream software, fighting the urge to ship 
a forked copy of ihe codebase wilh some features thai 
would be deemed controversial upstream, or which would 
lake a longer lime lo gain acceptance. This might result in 
some features getting delayed as discussions pan out, and 
developers pitch in with their opinions on how to do things 
the 'right' way. But, in (lie end. the best technical solution 
wins and maintaining the solution that's accepted by all is 
easier in the long run. With most enierprisc Linux vendors 
offering seven-year support guarantees, this becomes a big 
plus. This is because keeping the private functionality in the 
siable offering working, while also backponing fixes and 
optimisations from an upstream codebase that changes more 
and more each day, would soon become a nightmare for the 
maintaincrs of the enterprise software. 

Just comparing ihe two open source virtual! sat ion 
solutions, Xen and KVM, shows us the siark contrast 
in these principles and the benefits of collaborative 
development. EElf'V 

By: Amit Shah 



The author is part of the viriuaiisaiion team at Red Hat and 
is excited to be a pan ol the technology that's rediscovering 
commodity x&6 servers. 
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Guest Images 

Understanding libguestis. a library to access and modify VM images, 






Tost administrators might have 
experienced the ease of using 
Sysprep for the automated 
deployment of Windows-based 
machines, especially virtual desktops. 
Automated deployment of virtual desktops 
and servers in batches is inevitable in an IT 
infrastructure that has virtual isat ion. There are 
certain things that are unique in every guest, 
like the IP address, hostname, licences, certain 
configuration file parameters, etc, which need to 
be updated at the time of deployment. 

I had been thinking a lot on what could be 
the equivalent on the Linux side when it comes 
to deploying Linux-based virtual machines. 



Around this time, I upgraded one of my boxes 
to Fedora 12 and learned about the availability 
of libguestfs and guestfish. The interactivity 
of the utility may not be as robust as Sysprep. 
and libguestfs alone may not be equivalent to 
Sysprep in all aspects, but it bridges a big gap in 
the automated deployment of virtual machines. 
Deploying virtual machines from a template 
has always been a challenge due to the diversity 
of requirements and use-cases for different 
machines. The traditional way is to deploy 
the virtual machine from a predefined general 
template and customise it later for specific 
requirements. This is absolutely non-scalable 
and is a huge burden on the administrator. 
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libguestfs helps overcome ill is challenge. Since Anaconda 
installation is not done while virtual machines are deployed 
from pre-defined templates, using kicksiart %posi is not an 
option, libguestfs can be used to automatically make these 
required modifications inside a guest fllesystetn before the 
guest is deployed. 

libguestfs is a library used to inspect, modify and 
manipulate virtual machine disk images. It supports almost all 
virtual disk formats like the raw image, vmdk (VMware image 
format), qcow2, LVM block devices, etc, and filesystems like 
ext2, ext3, exl4, btrfs, FAT, NTFS, etc. 

The libguestfs tools 

libguestfs provides some loots to manipulate the images 
efficiently. These are provided through the libguestfs-tools 
package in Fedora and can be used on the guest images 
non-interaciively. 

• vin-rescue: Launches a shell in the guest image to do 
rescue operations like editing boot con figuration files, 
modifying initrd images, etc. 

• virt-edit: Opens the specified file inside the guest image in 
your favourite editor. 

• Wrt-mspecror: Gets basic details about the guest from its 
image, like the kernel version, modules loaded, mount 
points, details of applications installed in the guest, etc. 
Other tools are virt-cat, virt-ts, via-rcscue, virt-df, virt-tar 

and vin-win-reg — I'm assuming readers will find the names 
self-explanatory. virt-win-neg is used to display Registry 
Entries from a Windows guest image. 

The syntax of how to use virt-cat is as follows: 

■ : <eu«t *•*«• Of Block ■)'.!'!• <M« **—> 

For example: 

• vir: cit flM»g Whom 

12! .0.8.1 localhou locilras: iMilOwum locaihojK iocathoiU. 

lOCllltCMlM 

lOUlhOtt tOtalnojl.loCaidOMlll iKllMitO lK4lho«». 
lOClUOMUf. 

Checking the man pages for the respective tools will 
provide more details on how to use them. 

There are certain tools developed with the help of 
libguestfs. virt'Vlv is one of them, and is used to migrate 
virtual machines running on one platform to another one (for 
example, virtual machines running on VMware to KVM). 
libguestfs is used extensively by this tool to modify the 
filesystem images to run appropriately on the target platform. 

libguestfs can be used to inspect a guest filesystem while 
in offline mode and collect data for administrative purposes. 

guestfish 

guestfish uses libguestfs to launch a shell on the guest fileystem 
to help us modify the image efficiently, offline or online. It's 
recommended not to invoke it on running guests and make 



modifications, due to the possibility of filesystem corruption. 

You can invoke guestfish on online guests in read-only 
mode to view details. You can call it from a shell script. 
invoked from the command line directly, without launching 
an interactive shell to execute commands inside the guest 
image. You can also use it lo launch an interactive shell 
on the libguestfs filesystem and execute commands from 
the shell. Examples of each method are available in its 
respective man page. 

You need to use the -J switch to execute guestfish to 
launch an interactive shell: 

« gutJtMH I fiJ.Uo 

tftlceat ;n ; i 
♦Oltlnj virtual mttn 



f)fM 'fwlp' foe k»l; 
•fluif ;o | 

Typing help here will display all the available commands 
inside guestfish and running the help <command> will give 
more details aboul the specific command. 

Troubleshooting 

You can also use libguesifs 10 make modifications inside 
a guest image for troubleshooting purposes. This makes 
troubleshooting on a broken guest very easy. An administrator 
does not need to go into rescue mode to reinstall Gmb. make 
modifications to boot loader configuration files, etc. Let us look 
at the simple example of a kernel upgrade rendering ihe system 
non-bootable. Reverting to die old well-known working kernel 
is as simple as running the following command: 

• owi'.'cih 1 <au*sc wot/ blockdivlet> 

...and editing the /boor/arwrygrub.con/ file to change the 
default kernel to boot. 

In the same manner, we can reinstall the boot loader on the 
fjiiosi image if ii wmelum gei^ corrupted. There is no need 
to follow the old way of looking for a bootable CD and going 
to rescue mode to reinstall it. As a matter of fact, this way 
of recovering a broken production virtual machine becomes 
much faster compared lo recovering a broken physical system. 
Let us have a look at how we can reinstall Grub on a Fedora 
12 guest image. 

Use virt-df on die image to view the filesystem details of 
I he guest: 



i :«• 
fU.l»a:/B«v/Vol6r**/lv_feot 
f:2.«9-/orv/Mi: 



» block! VttO Araliabjt Mv 

W.Mt iMMa iUtTM H.Wk 

:«u> ::**> iwwj i».n 
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This shows thai the / filesystem of the guest is on /dev/ 
WCroup/iv_root and /boot is on /dev/sda I . 

Next, launch an interactive guest fish filesysicm shell 
on the image by mounting both / and /boot filesysiems. 
appropriately. 

• g»wllui> I r;? i*j -. /dm/oooper/VolGroufi-lK.roo: ■■ /dr. .-Mil /Oh.: 

v»!eo»» 10 guei!hsn, :rr llDjuwtfi lUtiyitn in!*»«ci]»« il»U tor 
editing viriwt ucliine Utsytitai 

• :r rejp nith cowanm 
to quit It"- 

xt»> at 

m «ouMtd on 
/oov/aoppcr/VoKrcuO' Iv.ioo: 

U21.W :UlKi m:*jw u> /tyiroot 
/dtv/sdol 19U37 2UJS 1WSM ^» 'lysrootVooot 

xfi> g/u» miull / /d»v/«tl 

In the above command, the image or the block device 
on which the guest is installed should follow the -a 
switch. Each block device that needs to be mounted from 
the guest should follow the -m switch in the format of 
the 'block device:niount point'. We need to mount /boot 
since the grub- install command installs stage files in the 
/boot/grub/ directory. 

Template 

Most viiiu.iiK.it ion technologies support deploying 
virtual desktops from templates using (he copy -on- write 
(COW) method, libguestfs will be very useful in making 
modifications on the template, running security updates on 
the template, etc. 

For example, let's assume 200 virtual desktops are 
deployed from a template using the copy -on- write method. 
While using this method, changes specific to a virtual 
desktop from the actual template will be stored on a 
different file. The template wilt be used in conjunction with 
the changes on the file to form the guest filesystem. If the 
kernel needs to be updated on these 20(1 virtual desktops, 
it's as simple as taking a copy of the template, using 
libguestfs to update the kernel on the copy of the template, 
and changing the template for the guest to use to the new 
template with the updated kernel. On the next reboot, all 
the 200 virtual desktops should have the updated kernel. 
Likewise, making batch changes to configuration files is 
also very easy, using this method. 

Windows support 

libguestfs has minimal support when it comes to handling 
Windows-based images. FAT and NTF5 filesysiems are 
fully supported. You can use vrrt-iWn-rcjj to view the 
values from the Windows registry. For example. 1 used 



the following command to get the product name from a 

Windows 2003 image: 

IA-rt| NlriOM-MN.Un 'VWOT.LOUljUOllWvsoftuirrvnterosoriv 
Mtfldata incur rtfltventon' »rodiic:Ma» 
HlcroMf: Window) Sttver IMS 

Partial back-up 

Taking a full back-up of a virtual machine is very easy, iust 
backing up the whole image or taking Ivm snapshots or 'dd-ing' 
block devices will suffice. On physical systems, taking a gonial 
back-up (e.g., taking a back-up of Apache configuration files only) 
usually involves copying content from inside the virtual machine 
over die network, using rsync, scpor odier back-up utilities. 
Libguestfs can be used to take a partial back-up of (he guest from 
the host without logging into the guest. I lowever. it needs to be 
noted that, for a reliable back-up. 1 strongly recommend tliat you 
do not use libguestfs. A back-up agent should be installed inside the 
guest, like we do with onlinary machines. 

Cloning a virtual machine 

Cloning a virtual machine is usually done by copying 
the image of a virtual machine to a different location and 
replacing details in the image that are unique to a virtual 
machine, like the hostname, IP address, MAC address, etc. 
You can use libguestfs to serve this purpose, whereas these 
unique details will either be replaced with actual details 
provided by the user or replaced by a placeholder. 

Areas tor improvement in libguestfs 

One thing that I expected to see in libguestfs was support 
for Solaris filesysiems like UFS, ZFS, etc. Unfortunately. 
it's not available as of now. (Note, that this isn't a libguestfs 
drawback, per se. If Linux has support for them, libguestfs 
will support them. Also, there are some licensing restrictions 
when it comes to supporting ZFS.) 

Caution 

One thing that needs to be kept in mind while dealing with 
libguestfs is not to make modifications when using it on 
running guests. There is a strong possibility that this will 
corrupt the guest filesystem beyond recovery. Future versions 
of libguestfs will introduce thorough locking to prevent people 
from doing this. At this moment, it's recommended to always 
connect to running guests using the — ra switch to guest fish, 
to prevent modifications. EElf " V 

Resources 



• libguestfs home: www.46ouftstfs.Ofp 

• Richard W M Jones' Blog: rwmj. wordpress. com 



By: Sadique Puthen 



The author is an open source enthusiast with deep interest in 
Linux and virtual isation technologies. He is currently working 
as a senior technical support engineer at Red Hat. and can be 
reached at sputhenp@redhat.oom 
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There's been much brouhaha over virtuallsation. Have you ever worn 
would happen if a single compromised VM compromised all the other \ 
on the same hardware stack'' *^b-' ^A 



y7& the usage of virtual isation 
f*\/f increases, the security that isolated 
\/Ag physical machines enjoy is at risk. 
t/SJ^ Rogue processes in a guest OS might 
break out of the virtual machine and get access 
lo the host memory or other guests. Designing 
security features within hypervisors can control 
this. But in case of such incidents, the risks can 
be mitigated by integrating Mandatory Access 
Controls (MAC") with virtual isation. 

With the integration of MAC-capable 
security schemes like SELinux. with 
vinualisaiion, the security position of guest 
machines can be improved. 

Let's take a look at how the scenario might 
unfold. We can begin by examining the situation 
as it existed in the good old days when one 
physical machine ran a dedicated server: 



Before virtual isation, servers were generally 
physically isolated from each other {Figure 
1). An attacker taking over one server would 
typically have control over just that. So, if 
he wanted to breach the other machines on 
the network, he essentially had to launch a 
network-based attack to exploit them. This 
limited the damage <>i network attacks. To 
avoid these kinds of attacks, administrators 
used different tools like network fire wails. 
intrusion detection/prevention systems, 
and unified threat management systems to 
mitigate the risks. 

With the advent of vinualisaiion, several 
guest machines run on the same single host 
server (Figure 2), and probably as the same 
UID. This comes with its own risks. If an 
attacker gains at cess u> a single virtual 
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machine, he then jusi needs to breach (he hypervisor 
iniiiiiiii on iIil- htjsi. II there is .1 hyiwrvisoi vulnerability 
currently existing in the wild, lie can exploit it and can 
thus, eventually, take over the rest ol the virtual machines 
running on the host. 

Understanding sVirt 

sVirt was introduced as a feature of Fedora 11, and conceived 
as a security mechanism lor t.inux-based virtualisation 
schemes like the (kvvi) Qemu. and guest ii has been 
developed primarily by Dan Walsh and James Morris, of Red 
Hai. Some of the goals/use-cases of sVirt are listed below: 

• Providing virtual ised services with a level of isolation 
similar to that previously afforded by physical separation. 

• Increased protection of the host from untrustworthy VM 
guests (for example, for VM hosting providers, grid/cloud 
servers, etc). 

• Increased protection of VM guests from each other in the 
event of host flaws or mis con figuration. Some protection 
may also be provided against a compromised host. 

■ Strongly isolating desktop applications by running them 
in separately labelled VMs (For example, online banking 
in one VM and World of Wire raft in another: opening 
untrustworthy office documents in an isolated VM for 
view/print only). 

How does it work? 

sVirt essentially works by adding SELinux support to 
the Linux virtual isation library libvirt. It is designed as a 
pluggable security framework into the libvirt API (Figure 3). 
It also supports other MAC security schemes like SMACK 
(Simplified Mandatory Access Control Kernel), a security 
kernel module. In a typical use, one ought not to even notice 
sVirt running in the background. 

As you already know, SELinux works by labelling 
everything like files, devices, processes, etc. The libvirt 
daemon (libvirtd) starts all virtual machines. And all virtual 
machines run as separate processes, libvirtd dynamically 
generates labels for the image Tiles and starts the virtual 
machines with the appropriate labels. The SEI.inux policy has 
rules that allow the swrr_( processes to read/write sv'<rt_ 
imagej files and devices. 

This allows us to protect the host machine from any 
of its VM guests. A virtual machine will only be able to 
interact with the files and devices with the correct labels. A 
compromised virtual machine would not be allowed to read 
my home directory, for example, even if the virtual machine is 
running as the root. 

However, this 'type' protection does not prevent one 
virtual machine from attacking another. We need a way to 
label the domains and the image files with the same TYPES. 
Yet, at the same time, we need to stop virtual machine I 
(running as svinj) from attacking virtual machine 2, which 
would also be running as svirt_t. 

This is where the Multi Category Security (MCS) 
mechanism comes into play. MCS is an enhancement 




Figure 1: Servei Setups in the absence ol visualisation 




Figure 2: Servei setups using visualisation 




Figure 3: Simplified libvirt architecture with sVirt integration 



to SELinux, which allows users to label files with 
categories. These categories are simply text labels, such 
as ' Company .Confidential' or "MedicaLRecords". The 

sysadmin first configures the categories, then assigns users 
to 1 hem, as required. In a nutshell, to access a file, a user 
needs to be assigned to all of the categories with which the 
file is labelled. 

Note: The first thing the sysadmin will want to do with MCS 
is configure some categories. This can be done by editing 
the Mi/aelinux/targetedysetrans.conf file. This file specifies 
how the internal M( -S t ategoi ies can be mapped 10 human - 
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Table 1 ; Example VMs and their SELinux labels 


Name 


Virtual Machine process 
label 


Virtual Machine image label 


Virtual 
Machine 1 


systern_u:system_r;svirt_t:sO: 
c514,c932 


system_u:object_r:svirt_im- 
age_t:s0:c514,c932 


Virtual 
Machine 2 


sy stem_u : sy stem_r:svirt_t : sO: 
C101.C230 


system.u : object _r: svirf_ 
imagej:s0:c101.c230 



readable formal v Tin- following snippet 
shows the typical contents of the 
setrans.conf file: 

u :c:-»itif<i:»«t'( 

.■4ecr*t 

From the above snippet, the left 
hand side of the 'equals to' sign is 
the MCS security level, with the 
corresponding human readable 
value on the right. To list the current 
categories defined on yotir system, use 
the cheat -I. command. 

Each VM has unique MCS 
categories, and the SELinux security 
policy does not allow interaction 
between different categories, 
irrespective of their actual values. The 
file systems' device/image for each VM 
is also labelled with the VM's MCS 
label, to prevent VMs from accessing 
each other's resources. 

Till Fedora Core 5. the typical 
SELinux context consisted of only three 
fields: USER: ROLE -TYPE. 

Later on, SELinux added one more 
field, so currently it's: USER:ROLE: 
TYPE:MCS Label, 

Let's look at the example of Table 
I , where libvirt creates two virtual 
machines with dynamically generated 
SELinux labels. 

You can obtain the SELinux labels 
for a running VM process, as follows: 

• pi tZ \ grre qcau 
ly««.n:iyH««.r:s«ir:.t:sO:c5Ii.q»U 

You can obtain the SELinux labels 
for the image, as follows: 

• Ii isvlrt/onB/tMffVflJ.tfs 



syitw.u: c«J«! J Mr t . UU9> 

In the above snippets, lake a look 
at the MCS labels. Here, sO indicates 
the 'Sensitivity Level', and c514 as 
well as c932 indicate the 'category of 
the data'. Administrators can define 
these categories. 

If you attempt to change the 
SELinux context {using the chcon 
<(>mm,iii(ll nl ilie VM image lilt*, it will 
throw up SELinux AVC (Access Vector 
Cache) denials. 

SELinux prevents virtual 
machine 1 (system_u:system_r: 
svirt_i:s0:c514,c932) from accessing 
virtual machine 2's image file 
( sy stem_u : object_r : s v i rt_l mage_i :s0: 
cl01.c230)— the VMs can't access 
each other's data, either on -disk or in- 
memory and hence cannot attack each 
other. ESD^*^ 
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Here's a simple protocol that can really add some spice to the growing desktop 
virtualisation market. 



>^sk any person from the apparel 
f~\y/ world and they will all agree thai 
\/\/ "Fashion repeats itself!" Some 
C/SJ* 1 ' will also hasten to add thai new 
designers and manufacturing technology 
reinvent the earlier forms into styles relevant 
today. Personally, t feel that the length and 
breadth of some of the most fashionable 
garments are taking us back to the Stone Age. 

Does this hold true for information 
technology as well? From the huge 
mainframes and minis of yesterday to 
powerful desktops, we seem hi Ih- mining 
back to an era of thin clients. Undoubtedly, 



technology innovations have added their spice 
to this repetitive cycle in the evolution of 

ti'iiiniiing> [in « ii seam to tot}. 

Instead of a thick, fat. powerful computer 
sitting in some remote corner, cloud computing 
and server virtualisation has enabled us to 
concentrate technical horsepower in the data 
centre. Virtualisation on the ubiquitous x86 
hardware has enabled organisations to optimise 
their IT rupees on hardware. The advent of 
TCP/IP, the Internet, and specifically the HTTP 
protocol and the browser, have enabled moie 
and more software to be delivered as a service 
over a witle variety of devices. 
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Yet, today, even if you check your mail on a sinan phone, you 
H,et back to your laptop for jobs that can only be done on your 
deskiop'notebook PC. The handheld today is striving liard to be a 
replacement, but is at best a complement. 

Imagine, if you were able to work on your handheld as 
if it were your PC. If you were at home, you could simply 
log out of the handheld and log in to the home entertainment 
laptop. At office, you nmld work on a thin client and if, by 
chance, your handheld ran out of battery while travelling, you 
could continue from where you left off on a friend's handheld 
or from any other device capable of connecting (o your data 
centre over the Inter net. 

If the above seems too futuristic, ibis article is for you. 
If it sounds stale, maybe the next article will be the one for 
you. Hither way, you cannot escape the promise of desktop 
vinualisation; my desktop — everywhere, everylimc. 

But what is this new thing about desktop vinualisation? 
Have we not been using the remote desktop, VNC and other 
tools for ages? I lave we not logged on to remote PCs and 
achieved the above? Ask all software developers and they will 
tell you how difficult it is to work without the ability to install/ 
use their favourite editor/debugger. Ask any office assistant to 
prim simple documents on remote desktops 10 local printers, 
or ask a sysadmin to copy a required patch from a local USB 
pen drive to the remote desktop, and they wilt (ell you it's still 
not an easy task. 

Desktop vinualisaiion is significantly different from 
server-based computing and that is why it holds great 
promise — especially for the BPO and software development 
(IT and ITeS) verticals to begin with. Once the technology 
matures lurther. I am sure (hat it would be (he platform of 
choice for all. Software as a Service (SaaS) might give way to 
(he Desktop as a Service (DaaS). 

To quote Wikipedia [en.wikipe<}ia.org/\viki/rk'sktop_ 
virwoli/uiion), "According to a report by Gartner, hosted 
services accounted for more than 500,000 desktop units as of 
March 2009. but will grow to 49 million desktop units by 2013, 
and may make up as much as 40 per cent of the worldwide 
professional personal tomputet market. b> revenue." 

Server-based computing (or SBC) refers lo traditional 
methods of remote access — VNC, rdesktop, eic. Desktop 
\ iniralisaiiou has distinct advantages over server-based 
computing for individual access. Some of these that 
can be clearly envisaged a( this stage of the emerging 
technology are: 

• A user experience similar to ihe local machine. 

■ Desktop vinualisaiion provides access 10 local audio, USB. 
eic, providing unparalleled ease of use and flexibility. 

• CPU and GPU intensive tasks can be offloaded to the 
client instead of increasing the load on the central server. 
A user running a CPU -intensive compilation can slow 
down the central server for oihers, 

" Complete customisation and freedom — all users can 
add' remove software, and customise the environment as 
per their preferences. 
Apart from server-based computing, desktop visualisation 
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Figure 1: The SPICE architecture 

has tremendous benefits over the 'desktop' model as well — 
one machine per user: 

* Freedom from hardware crashes: In case the client 
hardware crashes, (he remote session can be easily 
accessed from any other device. 

■ Better security: Again, this is based on the assumption (hat 
a data centre is generally more secure in all aspects. 

• For a sysadmin, managing hundreds of individual machines 
versus managing virtual machines translates to ease of patch 
management and new deploy menis... the list is endless. 

In short, desktop vinualisation is here to stay. It is still 
early days, but i( is undoubtedly (he way forward in these 
limes of server vinualisaiion and cloud infrastructure. 

There are already a few products in ihe market lor desktop 
vinualisation, bul il is (he open source SPICE technology 
that holds the key, as far as 1 am concerned. Preventing 
vendor lock-ins and based on KVM (slock l.inux kernel), it 
holds imcresting prospects. Red Hat has open sourced (he 
SPICE protocol thai it acquired from Qumranei into Red Hat 
Enterprise Vinualisation for Desktops (currently in beia). 

SPK i >l,mds I'oi Simple Protocol foi Independent 
Computing Environments. The basic components of SPICE are: 

1. The SPICE server 

2. The SPICE client 

3. The SPICE protocol 

In a traditional SBC environment, there are just two 
layers — ihe Iwi k-end and the front-end. The back-end layer 
resides on the server hosi. and the froni-end layer on ihe client. 
The front-end layer of ihe software interprets die inputs — the 
keys* input and mouse movements — and transmits them over lo 
the back-end. The backend layer exposes the graphical display 
and the front-end layer, typically, plugs into this. 

How SPICE operates differently is thai (he backend layer 
does not connect directly to the underlying hardware through 
ihe operating system. The back-end layer is a hardware 
emulation layer. The desktop lo be logged in is actual ly a 
virtual ised guest ihat exposes itself through the Virtual Device 
Interfaces (VDI), such as a vinu.il graphics driver, etc. 

In the middle of the back-end and ihe remotely connecting 
i hem sits the SPICE server, which now actually becomes ihe 
froni-end for the virtual devices. 
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Figure 3: VDl port device and driver 

The SPICE server interacts with the remote client (SPICE 
client) on the outside, while on the inside it interacts with the 
virtual devices that are exposed to it by QEMU running over 
KVM. Figure 1 depicis SPICE architecture. 

The desktop being accessed from ihe remote location is 
actually a virtualised guest thai exposes its devices — typically. 
display, audio and USB — -to the SPICE server to connect with. 
Thus, SPICE will only work when ihe remote hosts are virtual 
machines. The remotely connecting client connects to the 
SPICE server using the SPICE protocol, which communicates 
events like keyboard and mouse inputs, graphics commands. 
audio streams, etc. 

The advantage of the above is an OS -independent protocol 
that only needs the SPICE client. You can install the SPICE 
client and run it using a Web browser like Firefox. Moreover, 
SPICE is able to achieve great performance when compared 
to other environments because a virtual CPU (called (JXI .) 
lias been developed [or SPICE to improve its graphical 



performance. This supports active display on the remote client 
(ram the boot stage — something not possible in traditional 
SBC environments, since the remote hosts to be connected to 
have to remain switched on and booted. Red Hat has released 
QX1. PCI drivers for Windows and Linux, though standard 
VGA is supported if no drivers are available. 

The graphics rendering subsystem differs from 
traditional SBC environments in another significant 
manner. Most SBC environments send graphical updates 
to the remote client by updating frame buffers. SPICE 
supports transmission and handling of 2D graphics 
commands. SPICE uses Cairo, a 2D graphics, device- 
independent library and Pixman for manipulating pixel 
regions (www.cuirographics.org). apart from using image 
compression, video compression and caching to increase 
the client side display rendering experience. 

Another important component in the SPICE scheme of 
things is the SPICE agent. This resides on the virtualised guest 
and supports a communication channel between the SPICE 
client and the agent. Yet another virtual device, the VDl 
Port — a QEMU PCI device — is used for this communication. 
This virtual device is used by the client to communicate with 
tite agent. For a virtualised Windows guest, the agent is a 
Windows service that runs on the guest. 

SPICE akn lias audio and USB support. At a recent 
demonstration, we used two different clients to connect 
to the same guest. We played a song on one of the clients 
(a Linux desktop), logged out of it and connected through 
a laptop (running Windows) to hear the same song being 
played. The customer has since evinced a keen interest 
in deploying SPICE for his office over a WAN link. 
The demonstration elicited the same "Wow" that 1 had 
experienced when I first came across this wonderful 
technology — a simple protocol thai can really add some 
spice to the growing desktop visualisation market. Feel 
free to contact me, in case you have any specific queries 
about SPICE or its implementation. EDr - *^ 

By: Varad Gupta 



varad is an open source enthusiast who strongty believes 
m ttie open source ooUaborota* model rot only tor technology 
Out also (or business, india's first RHCSS (Bed Hat Certified 
Security Specialist), he has been involved in spreading, open 
source through Keen & Able Computers FM Ltd. an open 
source systems integration company, and FOSTERmg Linux, 
a FOSS training, education and research training centre. The 
author can be contacted at varad.gupta@fosterirrgliriiix.com 
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The Poor Man's XP Mode 




In a perfect world, all software would be free and you could work on whatever 
system you chose. However, reality is always stranger than fiction, and a certain 
operating system called Windows, made by Microsoft Corporation, almost always 
prevents you from switching to GNU/Llnux. 



^^bewildering majority of Linux 
f~\/f users dual -boot between Linux and 
\/\f Windows. There are mam reasons 
d/S^ for (his, ihe most common of 
which is corporate software. Almost all major 
tympanies use custom software, which typically 
ran only on Windows. Another major cause is 
that Microsoft refuses to take any action against 
those who use 'unlicensed" and 'n on -legitimate' 
copies of Windows, The fact of the matter is. 
Windows is here to slay (at least for a while), 
and there's nothing that can be done about it. 
Of all the versions of Windows, Windows 
XP is still the preferred one for most of the 
world's population. No other OS can run as many 
applications as XP. Windows Vista was a disaster 
partly because it couldn't run a lol of older 
apps. In fact, rather than beef up compatibility, 
Windows 7 launched something called XP Mode 
for all its enterprise and 'enthusiast' versions — 
Windows 7 Professional and Ultimate. 

As Microsoft states, it hail no choice because 
the immensely long shelf life of Windows XP 



enabled a huge amount of software to be developed 
for it, most of which is incompatible with the 
cun-ent Windows NTS architecture. Microsoft 
has made sure XP Mode is available only for tlw 
enterprise versions — for offices running corporate 
software tlt.il are incompatible with NT6. However, 
the idea behind XP Mode is not novel— it's being 
put to good use in many other places. 

XP Mode: What is it? 

In its most basic form. XP Mode is a para- 
virtualised. fully licensed copy of Windows 
XP Professional with Service Pack 3 ntnning 
on Windows 7. With hardware-assisted 
vinualisation becoming available to the masses 
via AM DA' and Intel VT-x, a para-virtualised 
Windows XP makes perfect sense. At the cost of 
only a 1 5 per cent performance drop comjwreil 
lo the native perform.irui*. die Knesi mimuii ni 
Windows is able to run all (he apps that could ran 
on Windows X P. 

However, XP Mode isn't available for 
everyone. Windows 7 Home Premium 
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customers, (or example, are Mi out in the cold. 

Take the case of my father. He uses Windows Vista Home 
Premium because lie's a power user, but doesn't require all 
the power of Windows Vtsia Ultimate. Fortunately for hiiu, 
all his software work on Vista. But suppose they did not? 
He'd have had 10 fork oui over Rs 13,000 for Windows 7 
Ultimate, now that Windows XP isn't available on the retail 
shelves. Considering he already has a licence for Windows 
XP Professional as well, that would have been a huge loss. He 
might as well ditch Windows 7"s better user experience and 
install Windows XP. Either way, getting XP Mode working 
requires giving Microsoft quite a bit of money, 

Enter, the poor man's XP Mode 

In die l>esi case scenario, you use I ,inu\ but do have to use 
Windows for some corporate software (your need could even be 
as trivial as running your smart phone's PC suite-like software). 
II vou havea licence lot Windows KP.il means thai von liii ticl 
XP Mode for free, ami cut the hassle of rebooting every time you 
need to use Windows, As an added advantage, lite poor man's XP 
Mode works on Windows. Mac, OpenSolaris, Linux and even 
BSDs. And it has the best price one can ask for: it's free! 
What can this provide? 

■ A viruialised copy of Windows XP that can run all your 
corporate apps, sync your cell phones, run some games 
(NOT Crysis Warhead; so if you're a serious gamer, don't 
even think about this) and some niche software, such as 
desktop publishing and designing software, min-lineai 
video editors and more. 

■ A seamless environment, where the Windows apps look 
like they're on the Linux desktop. 

" Copy-and- paste between the Linux and the Windows apps. 

■ File sharing between Linux and Windows — for both read 
and write 

■ Accelerated DirectX on the Windows XP desktop. 

" All available for Mac, Windows. Linux, OpenSolaris and 
even BSD. Time to take revenge on Microsoft by making 
your XP Mode in Windows 7 Starter Edition ;-) 
Happy? As for the requirements for this sort of a set-up, 

hero's the list: 

* A legitimate copy of Windows XP ( Yes. although that 
9-in-l edition of Windows XP that you bought for SO 
rupees from that CD-walla at the train station will do fine, 
the whole point of this article is to have a solution that's 
completely legal.) 

• Sun xVM Virtual Box, PUEL Edition. 

■ About 1 0GB of hard disk space to spare. 
Assuming you are ready, let's do it! 

Step 1: Installing VirtualBox 

Sun xVM VirtualBox is a free, partially open source virtual 
machine software. Here I'll set it up on openSUSE 11.2. 

Basically, you need to head to the VirtualBox website 
(virtualbux.org), where you'll see self-contained packages 
fur almost all major Linux distros. plus a generic package for 
any that's not listed, It's just a matter of downloading these 




figure 1: Creating out XP Mode 

packages and double-clicking them to install VirtualBox. You 
will need to have Qt4 installed, and you must remove the 
virtualbox-ose package if it's installed. Also, it's a good idea to 
have the Linux kernel sources. GCC. and Make installed. 

Having come this far, it's time to add your user name to 
the vboxusers group, so that you get access to the USB system 
in Windows XP. To do this, open a terminal, and type the 
following command as die root: 

UMraod ■» rtoouwrs <yt>ur w-umv 

Depending on whether your distro is hit by this bug or not 
(openSUSE is), if nothing happens when you start VBox. type 
in the following: 

ctaod •> /utr/lIW»n:uJ]toi/Viriuj'.Sc. 

We are now done with this step. So let's create the 
machine that will urn Windows XP. 

Step 2: Creating the virtual machine 

I'd open VirtualBox. head it) voui System loots gmup under 
your applications menu. The first time you start this app. you'll 
be asked to register it. If you have a Sun Developer Network 
■ nioiiiii ii.i ,1 Project Kenai ID), then jusi emei youi e-mail 
and password. Otherwise, you'll have to fill in details about 
yourself. You can also click Caned and continue, but it's 
generally a good idea to register your copy. 

Now, on the lop toolbar, hit New. The Create New Virtual 
Machine Wizard will start. Hit Next. Now give a name to this 
virtual machine (as shown in Figure I), and leave the OS 
as Windows XP(or Windows XP64bit if you have a frlbii 
Windows XP), Click Next. 

You need to devote some memory to this machine. I have 
2 GB of RAM, plus 4 GB of swap space, so I'm going to 
give XP Mode 1 GB of RAM. If you have the dream 4 ( ,11 
of RAM, then you'd like to give XP 2 GB. though I GB is 
enough, as XP rarely requires more than 300 MB by itself. 
Once you are done, click Next. 
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figure 2: Time to install SATA drivers 




Figure 3: This is our XP Mode 



Windows host this is not viable due to the performance penally 
{the [wiiatiy. for some strange reason is Windows-only). Move 
to tile Acceleration lab, and enable all the available features. 
The ones that are not available are greyed out. VT-x or AMD-V 
is the basic llardware-assisl technology, .incl nested paging gives 
another huge performance boost. 

Now move to (he Display secdon and increase the VRAM 
to at least 64 MB. Also, enable 3D Acceleration, Note thai 
the VRAM is deducted from your graphics card memory (I'm 
endowed with 1 G8 of it), so there's no penalty on available 
RAM. However, If all you have is an old Intel 865GV 
graphics card with 64 MB of VRAM, you'll have lo make do 
with 12 MB of VRAM for the VM and no 3D acceleration. 
Once done, move on to the llurd Disks section. 

1 lere, enable the checkbox for Enable Additional Controller 
and select SATA (A I ICI). fn the attachments section, change the 
HDD slot from IDE Primary Master to SATA Port 0. Move to 
the C H DVD-ROM section and enable the checkbox ioi \hnml 
CD/DVD Drive. You may enable Pass Through if you want to 
write CDs in Windows, but at the moment, writing audio CDs is 
not possible and the host may behave in a bizarre maimer. 

\nu mine to the lloppy section. I lere comes the tricky part. 

We enabled the SATA controller just now, as like the real 
thing, virtual SATA is a bit faster and less costly on the host to 
virtualise. I lowever, Windows XP does not recognise any hard 
drives attached to the SATA controller, because it does not have 
the drivers. Therefore. Windows Setup exits with a 'No hard 
disks found" error. The solution is to use a lloppy image loaded 
with the Intel Matrix Storage Technology SATA drivers (since the 
SATA controller is an Intel ICI 18 chipset). Make sure the umip 
command is installed, and then ttead to http://tinyurl.com/matrix- 
drivers to download ihe f(illpy32j.ip file. Once it's downloaded. 
open a terminal antl type in the following commands: 



In this screen, make sure Bool Hard Disk (Primary Master) 
is checked; then select Create New Hard Disk and click Next 
and again Next. Here, you should choose Fixed Sue Disk for 
optimum performance, but a Dynamically Allocated one will 
do, too. A fixed-size disk will have all the hard disk space 
allocated at the beginning, while a dynamically allocated one 
will keep on expanding the disk size as the data grows in size. 
After making your selection, hit Next. Make sure the size is at 
least 10 CB. and then hit Next and finally Finis/). Again, at the 
summary screen, hit Finish. We have just created the Virtual 
Machine. Now it's time to fine-tune it. 

Make sure the Windows XP VM is selected, and hit 
the Settings button on the toolbar of Virtual Box, Move to 
the System section, and enable the checkbox for 10 APIC. 
Move to the Processor tab and enable PAFJNX to make the 
Execute Disable Bit feature available for Windows. Also, if 
your CPU supports AMD-V or Intel VT-x (hardware-assisted 
virtualisation), you will be able to increase the number of virtual 
CPUs available for the use of the VM. It's a good idea to use 
half the physical number of cores — so on a dual core you would 
use one processor, on a quad core make it two. On my triple 
core. I'm using two processors since the host is Linux, but on a 



1 1 >}} ,'U 

The EXE file is contained in the ZIP file and is another 
self-extracting ZIP file. Extracting it gives the file F32.IMA. 
This is a Windows Setup Driver Disk, which provides drivers 
to the initial Windows Setup to install Windows XP. Copy this 
file somewhere safe. 

Now come back to Virtual Box, ( heck the Mount Floppy 
Drive checkbox, select Image File and click the folder icon 
beside it to launch the Virtual Media Manager. Hit Add. and 
then browse to the F32.IMA file (you'll have to change the 
Fifes Of Type to All Files to see the file). Hit Select. Now that 
this step is done, move to Ihe Stored Folders section. 

Here, you can specify a folder that will be accessible as 
a network share to Windows. This share can be mapped to 
a network drive, and you can use it as a storage drive. 1 find 
giving it access to the 'Public' directory in my home best 
serves this purpose. To do this, click the Add Share button (the 
blue folder with the Plus icon), and then on the Folder Path 
field browse to your 'Public' directory. The machine is now 
fully configured! It's time to install Windows XP. 
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Step 3: Installing Windows XP 

inseil llii' Windows \V ( :!) hid [In- ( II ROM diiw and Man 
the Virtual Machine. Wail for Windows Setup to start. As soon 
as the blue screen appears, check the grey bar at the bottom 
when it asks you to press F6. As soon as it does (Figure 2), 
press F6. Nothing may seem to happen at first, but eventually 
a screen will appear, asking (or a Driver Disk. Press S here. 

Now a listing of the drivers on the floppy disk will appear. 
Select the "Imel(R) 82801 HEM/I IBM SATA AHCI Control let 
(Mobile IC1I8M-E/M)" driver, the second on the list. Press 
Enter twice. Now the Windows Setup program will start. I'm 
not going to guide you on how to install XP here— if you 
aren't sure, google for the relevant how-to article. 

Once the installation finishes and you've rebooted to start 
XP (Figure 3), it 's now time to configure it! 

Step 4: Configuring Windows XP 

First of all, update your copy of Windows. Install the latest 
Service Pack (which is Service Pack 3). all the hotlixes, 
Internet Explorer 8, Windows Media Player 11, .NET 
Frameworks 1.1 through 3.5 and Sun Java. This makes sure 
you are protected against all security (laws. 

Now it's time to install the Virtual Box Guest Additions. 
From the Devices menu in VinualBox. click Install Guest 
Additions. Follow the wizard (Figure 4), choose to install 
Direct3D Support when prompted, and reboot at the end of it 
all. Once it's done and Windows has started up again, go to the 
Mac/tine menu. Prepare to be ama/ed. Select Seamless Mode. 

It might lake some time to get used to this. The Windows 
desktop disappears, and the Windows taskbai sits right on top 
of the KDE4 or CiNOME panel. If you are doing this in KDE. 
it's best to give it its own Virtual Desktop, where there are 
no widgets. You will truly love this. Windows applications 
now look like they are part of the Linux desktop, except for a 
Strange theme and window borders. Refer to Figure 5. 

However, Seamless Mode does have some limitations, 
and there are haphazard renderings at times which look like 
screen corruption. Also, moving windows around the desktop 
becomes kind of slow, but it really does not annoy. There 
may be times you'd want to switch to plain old fullscreen 
mode, but this can be rather buggy. For example, on pressing 
HostKey+L, the Virtual Box window may just not appear. The 
only option then would be to switch back to seamless mode by 
pressing llostKey *L and then rebooting Windows. 

The next bit involves all those shared folders. Right -click 
My Computer on the Windows Start Menu, and choose Map 
Network Drive, On the dialogue box that appears, select a 
Drive letter, and in the Shan' path field, type in UVBOJfSVRl 
<Share Name>. For example, if the share name is 'Public', 
enter the share path as \iVBOXSVR\Public. Now, in My 
Computer, you can access all your shared folders as Drives. 

That does it. Our Windows XP Mode is complete. Fire 
it up, work on it, ran all your Windows-only apps with 
maximum compatibility, share data between the host and guest 
OS, copy and paste between the two with Shared Clipboards, 
even do some light gaming. But of course, if you expect it to 
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Figure 4: Installing VuuwlBm Guest Additions 




Figure 5: Running XP in 'Seamless Mode' 

run Crysis at 1920x1080 and 200FPS, with all settings turned 
to Max, I'm afraid it's asking a bit loo much,,. 

The bottom line 

Since Virtual Bos is cross-platform, you can use it to virtual ise 
XP on Windows 7 as well. If you are adventurous enough, try 
vinuaiising Linux on Windows. The installation is easy, but 
integrating Linux into Windows is not. But if you can do it, 
you will truly love the results. 

Finally, your mileage may vary. E3t" \ 

S»W\hs\rtK\)Km(^v^nTaen,3rim^santiVt%dem^^i^tii^mea 

which changes the U in the Sainastfalog qute a bit. Under the Stasesecfcn. the 

corftjuiation c rton? wt a 'Storage Tree", where you need to create cenUoHers (OE. 

SCS.SATAaretficrjrjyl.arxitrtwacHawcR^ 

fverytwg else remains more at less (he same, and the new U is very se* ffliptanetay. 

/ s 

By: Boudhayan Gupta 



The author is a 1 5-year-otd student studying in Class 9. He 
is a logician (as opposed to a magoan). a great supporter of 
Free Software and loves hacking Linux. Other than that, he is 
an experienced programme/ in BASIC and can also program in 
C++, Python and Assembly (NASM Syntax). 



wwwlinunFonJcotn , LINUX FOR YOU | MARCH 2010 | 45 



FreedomYug Guest Column 



Niyam Bhushan 




Ring the Liberty Bell 

Declare your freedom from enslaved music. 




''ou love freedom. You love sharing ideas, 
books and music with your friends. You've 
emancipated your computers from the 
claustrophobic coils of Microsoft's code and 
far by copyleft. Linux, and all things muft and mukt. Logos 
and messages on your t -shirts paint you into a tribal warrior 
of our digital age. You proudly demo your phone with pre- 
installed Android or any other free and open source OS. Then 
1 call your number. And all 1 hear is the iron-clang of a prison- 
gate in a dungeon, clamping shut. 




services, and music publishers. Sadly, in 
India, most musicians and lyricists 
get almost nothing from this, as 
they often have to sign away their 
copyrights and ownership over their 
authored works to a film-producer or music company. 



Wring that tone 

1 am talking about the teller Ring Back Tune (CRBT) that people 

have to endure, when they call you. Airtet for instance, markets 

this in India as 'Hello Tunes'. The 

irony of lite situation is that on one 

band, you haven't bought a single 

audio CD for years, in defiance 

against lite music industry's 

ami-customer practices, and to 

rebel against the high price of Rs 

100 to 400 per CD. You prefer 

Instead to source music tracks accompanied by all the excitement 

and adventure of digital discovery. On the other hand, you're 

unwittingly playing right into the claws of the other powers-thai- 

be when you activate CRBTs on your hand-phone. 

As a typical example, you're paying Rs 15 to select a track, 
and then an additional Rs 30 per month to 'subscribe' to the 
service. That's Rs 375 per year. If you change the tune every 
rrwmih or week, or have different tunes set up for different 
users, add Rs 15 for each instance. So, whether it's Rs 375 or 
more than Rs 540 per annum, that is a lot of money to pay for 
a single track of music, which is not even physically in your 
possession or stored as a file on your handset. Heck! For all 
that money, you don't even get to listen to it yourself. Any 
caller to your number listens to only a few seconds of tinny- 
sounding music streaming into one ear. 

Won and zero 

Now zoom out to the bigger picture here. According to 
widely- published industry reports, India has nearly 500 
million mobile phone users Su hypothetically, even if 10 per 
cenl pay for some form of music subscriptions, that's about Rs 
18 billion, or Rs 1,875 crore per annum. The actual user-base 
and revenue could be significantly higher. This services fee 
is distributed in three uneven chunks between mobile- service 
providers, outsourced companies providing such value-added- 



A call to freedom 

Here's my rose-tinted vision of FOSS-based flower-power for 
such enslaved music. It's obvious the software to enable all this 
magic is locked away from the hands of end -users and geeks. So 
the four freedoms of GNU need to be applied to such software. 
Then, anyone, anywhere can set up their own CRBT servers and 
services, with any music they like - without being restricted by 
the limited offerings of existing providers. Anyone could then 

share thi s music and service with 
"That iS a lOt Of money tO pay their friends and communities. More 

obviously, software could be written 



for a single track of music, 

which is not even physically 

in your possession." 



to run directly off handsels, to set any 
existing music file on memory -cards 
as the CRBT for any caller, so anyone, 
anywhere could download any CRBT 
as a music file to their handsets. 



Free enterprise 

Such freedom also entails the freedom to generate wealth 
out of niu/f-and-ntuJ(( software and services. Markets would 
be prised open from monopolies and cartels worldwide. 
The rules of free market enterprise would come into play. 
And this change can happen now. For instance, in a market 
crowded by mobile operators, sooner or later, a few will hit 
upon this idea to capture market share. Music services like 
Magnatune, and music published under Creative Commons 
licences could soon create their own buzzing communities 
thai provide free music to mobile-users from Philadelphia 
to Phagwara and anywhere else in the woi Id. I hese .ire 
interesting times, with the vision of Linux and FOSS 
extended to completely new paradigms of the new intangible 
economy of this century. Stay tuned for more bold ideas in 
the next column. E5)f"^ 



About Niyam 



inspired by the vision of Osho, Copyright February 20 1 0; 
Niyam Bhushan. frBedomyvgs at gmait dotcom. First published 
m LINUX For You magazine. Verbatim copying, publishing and 
attribution of this article is encouraged tn any language and 
medium, so long as this copyright notice is preserved. In Hindi, 
'muft' means •free-of-cost'. and 'muW' means 'with freedom'. 
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ESC is where the global 

design engineering 
community gathers to 
learn, collaborate and 

i celebrate innovation, a 



Secure Your Booth at 
ESC India 2010 

If you are looking at connecting with your 
buyers, then don't miss this opportunity to 
meet and influence decision makers at the 
place they go to find solutions: ESC India. 

Place your products in front of the widest 
audience of engineers, engineering 
managers and decision makers from the 
electronics and embedded industry. 




Attendees come 
to ESC India to: 

Identify new products & technologies 59% 
Identify new design techniques 31 % 

'ESC India 2009 saw a 95% increase in 

attendance while maintaining the same 

high quality of attendees 



For more information about 
sponsorship and exhibit 
opportunities contact: 

Anees Ahmed +91 98450 32170 
Shashikant Kamble +91 98336 73361 or 
esc@ubmindia.com 



www.esc-india.com 

Learn today. Design tomorrow. 
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Developers How To 



DJANGO 

When Python Bites the Web 





Here's how to start using Django (or Web application development. 



j«- — quoting Wikipedia. "software 
ffj] frameworks aim to facilitate 
m / sofiware development by allowing 
\a£/ designers and programmers 
to devote their time to meeting software 
requirements rather than dealing with the 
more standard low-level details of providing 
a working system, thereby reducing overall 
development time." 

Rails is one of the most famous Web 
application development frameworks on lop of 
the Ruby programming language. Django, on the 
oilier hand, is an advanced Web programming 
framework built on top of Python. Django is a 
strong competitor of Ruby on Rails. 

Django abstracts lots of background details. 
like the SQL database, by providing higher- 
level interfaces. It is a very handy framework 
and a quick solution to build any complex Web 
application. If you are already familiar with the 
Python programming language, you would find 
it easy 10 hack with Django. 

Lei us get started 

We will now look at how to get started with 
Django. You need lite Django development 
server to work with it. Download the 
development server from www.djangopro/eci. 



com and install it as follows: 

S agtl li:!p://iM<.iljMgogto}K'..cW«MilaM/l.:.l/twtaU/ 

$ :ir ■jyf Dlingo-l.l.l.ti'.g* 

5 £0 B]*n S o . 

5 »ix)o trt'.>mn \c.vo.; , 

...or on Ubuntu: 

S irfo «pt d*t inttill »;rwn-4)*nf* 

On installation, certain Django utilities 
like djanga-admin and mcmuyv.py will be 
available. We will use these tools tlinni^lnini the 
development process. 

Now let us dig into the basics. A Django 
project is an environment where we deploy the 
Django server. A Django project may contain 
more than one application. Here, there are 
Django Web applications that are sub-grouped 
as different modules. You will understand 
the distinction between a Django project and 
application in detail when we look at the code. 

You can create a new Django project using 
the django-admin command: 

ilym»«Mcktos:-/ms djaiw-iMm tU'tprojtct heUourt 
»lyiw «m cHxi.:-/im ca HUmntl 
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■ ■ ■n»lie«rtS .. 
■1 unigt py l*:t|r,3i f, 

A directory named helloweb/. which is tin* name given 10 
the project in the above snippet, will be created. The directory 
will contain the basic skeleton for a Django project. Figure 1 
shows the directory skeleton structure. 

You will find the inii .py file in most ol the directories 

in a Django project. lis purpose is to mark the directories on a 
disk as Python package directories, to be imported by Python 
in the program. 

For example, if we have a directory (00/ and it contains (he 

files inii .py and limtx.py, we can access its contents from 

a Python shell as follows: 

M fto laper- 

The manage.py (ile is the project management lile. 
We will execute this file to tlo further management tasks 
related to the current project after the basic skeleton is 
created. We will use manage.py to start the development 
server, create new applications, synchronise database tables 
and do many other things inside the project directory in 
which manage.py exists. 

The settings.py file holds the different settings variables 
for the current Django project. It includes the time zone used, 
database authentication and connectivity, templates, additional 
Django extensions support, etc. It manages the overall settings 
for 1 lie project. 

The urls.py file is the URL map file lor the current Django 
project. In urls.py, we will add different URL mapping schemes. 
When w« request some URL, the function of this file is to specily 
what should be displayed as the output. It has a pretty good regex 
support, and many customisation options. It directs each URL to 
a view function, which returns the output 1 ITTP I'filfl flBBr 

If some non-existent URL is requested, we can direct it 
to a custom '404 Error' page. Or if we request a URL in the 
format of hiip:ffexample.com/page/(digiisy(tar example, 
http://example.eom/page/l t/), we can write custom regular 
expression patterns such that this Web page will always be 
handled by a custom- written page function and the (digits) 
will be taken as the parameter. 

Now, let's look at how to set up a basic Django 
1 lelloWortd application. 

We'll use the Django development server to test our 
Web application. After development, we will deploy it on an 
Apache server with Django extension support. 

Navigate to the project skeleton directory that we have 
created and issue the following command: 

,»DS /urug' 

• «rrori. fognci 

Django vtrtlon I.J.I, using ic.tlngt 'MllMti.Mt'ln'p' 
Drvrlotwn: server U running H '■::? '- :i> 1.1 : WW/ 
dull !»♦ Jfrm »ith CCKTHOlC 




Figure 1: Directory structure of the 'helloweb' Djartp project 

The above snippet informs us that a development server 
has started and we can access the output pages from the local 
host machine by pointing a Web browser to the following 
URL: hup:// 1 27.0.0.1 :B0O0/. By default, the development 
server runs at port 8000. We can change it by using the desired 
pan number as an additional argument along with the manage. 
py command as follows: 

tiyi>ui4tuKtbo>:-/Lrr/ncl2a>eU ./MHug*.pn rutisriv*' port.nt 

Shell 

There is an option provided by manage.py— the Django sMI, We 
can use it to access the Django Python interpreter (which runs the 
current project's Python interpreter with its environment set-up). 
It is very helpful during the debugging process: 

<.,T-jnt«n»i /m/ptiiMM /mkjj« py !•»:: 
I t.ttel (rJ«4rcJ:7S4»7. Oct 2* »M, e; 

!«C J. 4 

typ» **•!>*, -cw,rigti:\ 'crtlitt' or Mctflw" for Bjrt KforwtJon. 
(I««r«c:iv«C»<BOlf) 



We need to write a sample Web page using Django now. 
Create a file views.py and append the following lines in h: 

frot» djmgo.htEp top. 

dr-r l«K«t'r; 

Ht«i = ••Hixwllo wo '</ni>- 
:p«fspons-(h:«l) 

TIh? above snippet of code is known as a 'view'. Views 
generate the HTML data for the Web page: 

We need to set up the urls.py next. Add the following line 
to urls.py, 

-.l-«wp.»W«.lrrj>.-), 

...so that it looks like the following code: 

fro* ajtftta.eoAf.urts.d'ftullt Incur! ' 
urlpttttrw • Mittrn 

.;w«b.vHir>.ino>K'), 

1 

Now, using a browser, check out the following Web 
page: http://iocaihosv.800O/beUoweb, You can see the output 
returned by the indexQ function. 
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Project settings 

The setiings.py file handles ihe overall sellings for ihe current 
Django project. Left take a look at the basic file structure. 
Here, I will only explain the important sections in this hie. 
It is much easier to comprehend other options since ihey are 
self-explanatory, thanks 10 the excellent commenting: 

»Iynu|ruclt»« : -rt*r/fw! ;■-, 

DAMaASE.EHStW - • « poito/e«|l.pjycoi>o? - , OMiareiQl'. 

-J' or 'orxll'. 
oat«*se_i»«« ■ » Or w:n to ar.ins* ■ :;i:»3. 

s*TAii-,r ush i « Mot ireeo vith jqlltej. 

MT»MSE_PASWO« = " « MOt u*ed wltfl < l 
DAIA&ASE_HOST • " * Stt tC e«oty string for locelhost. 

» Not used wit* sqliteS 
DATABASE .PORT - ' ' « Set to »*pty string tor tr: 

• Not used wlthi iqlllrS. 

This section is used 10 provide the database settings. In 
Django, we use ihe models concept to deal with the database 
and datamodels. It supports all die various database servers 
that are widely used. To use a MySQL server, we can 
configure the settings as follows: 

MTA4U£.rv:' 

DATUUE..UK - , d»tibMt„uat > 

OATMASE.USEt t ■mnti|««-.KlMf' 
MU&U£.PASS«OK> I 'H»fM>r«' 

We may use CSS and JS files as resource files for our 
Web page. In order to reference iliem we need to provide the 
absolute |uih and the medi.i UR1 path. I ■ « * r example; 

ifOtA.WOT s '/how •««»• 

. >cilfiot;:MM/n*l!oMe/wiiu' 

Well need to specify the MEDIAJURL parameter in the 
URL format thai points to the absolute path. Wi- will use ihe 
MEDIAJURL to access media files like CSS, JS and other files 
accessible throughout the Web URL. 

To facilitate template support, we use template settings in 
the setiings.py file. We specify the templates directory path 
using the TEMPIATE_DIRS tuple as follows: 

TE'PIATE.DIW - ( 

■/tow/:. MS/tcapll'.r 

■/HOW' .loMS/tWtlltes.dlrr 

I 

The INSTALLED_APPS section facilitates using third-party 
Django modules along wilh our project. For example, if we netui 
a user rcgisiralkm application, we need not write it from scratch. 
We can download it and attach that application to our project by 
keeping the application in our project directory and adding a tint' in 
the INSTAU.ED_APPS tuple. When we add some applications to 
the currcni project, we have 10 add its reference path to this tuple: 



USTAUCO.APM l ( 

•ojanfo.cowrlD iuth\ 
djanjo.coouio.contf 

■ajjnjo COfltrlB tissions', 

•djinjo.conttiD u:m . 
I 

Views and templates 

Writing dynamic pages in Django is very easy. Django puts 
different concepts into practice — like views and templates. 

Views are routines that actually return an output as a Web 
page, i.e., a dynamic page. We can keep several view routines 
for different URLs. When a URL is requested by a browser, the 
Django server checks its mapping from the urls.py file, and the 
corresponding function specified iti it is displayed as the output. 

Templates in Django arc similar to what we mean by 
templates, in general. The basic idea is to keep the HTML 
user interface code separate from the logic code and daia 
processing side. Templates provide a higher abstraction over 
the logic. We can use the variables and data thai are returned 
by the core functions as required by the user interface pari. 
Thus we can simply write the user interface code withoul 
bothering about the core logic. 

We will now look ai how to write view functions in 
practice. We can place our views in any custom .py file. But we 
have to specify its path in the urh.py URL configuration file. 

Consider the following code fragment: 

f<0» 0jan$o.h;:p leper: MnpRMporje 
def In* 

i»:iiir HttaMWQnMf'atll* *r:«M 

This is the simplest Form of the view function. 
To map a URL to a view function, we need to append the 
following line to it: 

.lowtb.vlM. index '), 

1 fere, r'*helhweb$' is the URL regular expression; the 
A symbol specifies that the page URL starts with hctloweb, 
and $ specifies that lite URL ends wilh hello web. Hence, the 
URL is matched to the indexQ function only when a correct 
'hello web' occurs in ihe URL. 

If the regular expression was jusi r'hetloweb', it can match 
any URL, likesome(m'rt«_ne/(Qwe&_someihjmj. 

The 'request' parameter in a view function is ihe 
HttpReqwst object. We can obtain data related to a session. 
GET requesi. and POST request from the 'request' object. 

To obtain POST request variables, we can use post. w 
= request.POST It will return a dictionary that contains all 
post variables and their values. We can use get_var ■ request. 
GET" to obtain all GET variables and values. Similarly, for a 
Session, use session_vor = requesr.sesston. 

To check whether a variable exists in a dictionary', we can 
make use of ihe hasJxyQ method, \iavv a look at the modified 
index view function that makes use of GET variables; 
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def lnd*i(rnj 

k wu, m pop tt^tntttr 

1' "Q- - '!»)» M'l 

-if Id, He* rtqunttd Is no: *»" v«qunt.GEt['|U9t.na'| 
■■pftnpooMlMii) 

Now [he page responds according 10 ihe GET request 
variable, oage_oo. Try different URLs — for example, 
hup://l 27.0.0. I: :8000/helloweb/?pagc_id= 100 and 
http://l27.0.0.l:8000/helloweb/ 

We will now look at how to handle page/t5f-iype URL 
mapping to views— for example, ftffp.7/1 27.0.0. 1:8000/ 
hclhweb/page/44/. Peeking inside the urls.py file, we have: 

■attOTrlt", 

. :o««o,/!>»o»fC»<i«9r.M>\<i-]/r. 'i»:iwii.«i'- 

I 

The view function in views.py: 

rttwr',:, tjg*.:d|: 
r«iu(n MItp*MOMH«*TMt is »»j«: W K^V ie "> 

Here, (?P<pageJd>\d+) is the regular expression 
technique used: \d+ defines the type of data, i.e., the digits; 
ami <pmjc_kl ■ defines trie name of the variable, so that we 
can use it as an argument for the view function page. 

The view function can parse the page number from the 
URL and set pagejd= number, so that we can manipulate the 
output I IttpResponse according to that page number. 

Here we have discussed a simple 1 IttpResponse, which 
always returns HTML code given as an argument. Now we 
will look at how to deal with templates. 

From now, we will place the I ITML code as separate .html 
files, instead of inside the view function — and we call them as 
templates. Set the templates directory in settings.py. 

^ f pint _om -- ( 

VkMt/t] tNtlMtt* 

I 

Create an HTML file in the htmljemplates/ directory 
called iemplatel.html. with the following content: 

»rb prO)«Ct</t>:ltx/WiO> 
<P> This IS • K*llC«rt tM»:it*</p> 

jiifdim <y;«x:a>Ron »o</:dxm> 
<trxtMi</to> 

:«x/:i> 
■ 
c/ukU* 
</6o«y> 



Now we can modify the view function to support the 
templates. The HTML interface code is taken through a get_ 
template function. Here, Context() has a dictionary argument. 
It takes the variables and objects to be passed to the template 
to generate dynamic code. However, no objects are passed to 
the template— the template is just a static HTML page: 

def u ' 

im d]»)c :wli!t .tw upon gtt.tMplatf 
fit* d)irjr>.ir«ciijif laport Canttxl 
slt«.t«plat-: eCS««oii:e 

;:e.:e«oU!*.reMer|c«««it(nil 
■<:tp»tsponte(h:»li 

Or we can write the same template rendering in one line 
using the rrncfer_!o_rrspansc shortcut as follows: 

Off l«)M(f'j 

fr» t); upon itMtrjojnfKir.it 

if.urr. pocs*("I««(>;i 

We will receive an output like what's shown below: 

This is a helloweb template 
Student Roll No 

51 l 

52 2 

53 3 

This is purely static. Now we will write a dynamic page 
utilising the facilities of the Django template system, Change 
ihe table section of iemplatel.html to the following: 

<takl«> 

■•:a>Roi: M« 
(\ tot (HBf.roUno in stuwtil.Usl.lttus x) 
!>({M**}}</t<xt4>{{rsllao)></ld 

(\ Mdf»r V 

titc ujt t»i> foUoutng too* Just taovt tr* <t*Mt> 
tliq It en 

{IMS;- 
«/0» 

...and the new view function to: 

dtf lfiOta|rcoiitst): 

fro« djinoo. shortcuts Uoort rtndtr.to.rtsfont 
Pa(:filst 

If ftqu' .; - H*j"): 

tagsTrut 

j:wj«.>- a'-.t.'U':*) 

M ttsfOPMCirr 
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...where: 

■ {'s(utlentJist':$Hu}entJisi. 'flag': flag} is the argument we 
have p.ivsiil id tht- template file. 

■ The flag variable becomes true for URL hup:/ 
/127.0.Q.I:8000/helloweb/?Pag and false for hup:/ 
/127.0.Q. 1 :8000/heltoweb/. 

• 1% >[flag %} is a conditional block that returns die code 
part by checking the Boolean value of the flag variable 
passed to the template. 

• A I % for name.rotlno in student Jist.items %) statement is 
used to derive rows for the table from the data passed as 
the dictionary to the template file. This is the same as the 
Python statement: for key.val in diclionai vimm ) 
Check out the following URLs. http://l27.0.0. 1:8000/ 

helhweb/?flag and http:// 1 27.0.0. 1 :8Q00/helfoweb/ and see 
how they work. 

Like the above template techniques, there are lots of 
options facilitated by the Django template system. The best 
place to look for more about Django templates is the code 
example from the Django documentation website at http:// 
docsMjangoproject.com/eit/dev/ref/teniptQtes/builtins/ 

Databases and models 

Django is designed to work with different database 
management systems. It provides a nice interface to interact 
with the database- and storage- re I a ted tasks. Django does 
not use traditional SQL queries to interact with the database, 
like most of the other Web programming frameworks, ft 
introduces a new concept called Models. 

In Django, we do not need to work with any SQL 
queries: the data model concept introduced by Django 
makes it possible to handle data in terms of objects and 
groups. Therefore, we have the option of object-oriented 
database manipulation and management through Django. We 
manipulate every piece of data in terms of objects. 

Let's go through a simple example on how to write a Web 
page that deals with the MySQL database. Create a database 
helloweb_db. using MySQL or phpmyadmin. with the user 
name helloweb and password hellowebpass. 

To run applications involving MySQL access, make 
sure that the mysqi-server and pyihon-mysqldb packages 
are already installed. Modify sett'mgs.py with the MySQL 
database details as explained in the earlier part of this article. 

Django can only handle one project at a time. But it can 
execute many applications, Applications are sub-modules of 
the Django project. While deploying the Web server, we set 
the Web root directory to a Django project. We access all other 
Django applications related to that project by post fixing a path 
to the Web root URL. 

Now we will create a Django application to learn how to 
code database interactive pages. 

• — «k6w:-/lFt/H«lioiwBS ./Mnage.py stanaps student 
slynntr l.cwbS cd student 

Now the skeleton files for the application book appear in 



the book/ directory. There will be a models.py file. Write the 

following code in it: 

fro* django. ib Uteort aodels 

civ.-. Stuoeiit»*olirer(»ooel».>loo>I|: 
nm- •ooe!vChifField(*»i_:' 
qujrdlin.uac. •odelsClurCleldf " 
lOllno ■ »«*'.<., Integer! :>■ 
adaMtloMtte < ■oO*!i l D4[tTUwM«14n 

We now need to add the reference to the application we 
created to the IN$TALLED_APPS tuple of the settings.py 
file — i.e., add the entry heito web. student to the tuple. 

To create the corresponding tables automatically in the 
database, issue the following command: 

tlyiHu|tuctl)o<:-ArT/tv«l]<wW ./•amje.py syncdb 

Creotl 

you? 
Creating, table «utnjj»r 
Creating labia lutrinessage 
Crei:iirj '.able django.coo:- 

■.*> django.. session 
Creating table django.slte 
Creating tJ! ■ nter 



yot ««•? km any 



You Jul* installed (Hiunjo't tula syste*. «hlcl> • 

superuurt dtbntd. 

wewlrl you lite to create one no/> (yet/no): yet 

Uttfnme (leave Blank to I 

E-iuil J3Ur» oi. cm 

PiS1«- 

PasiMtd |er r ' 

Superum created successfully. 

ijtri.Peraiillon km*! 
Installing mac for lutn.kesiege node! 



You can sec that besides the studem_studentreghter tables, 
so many other tables are also created. These are actually for 
the user administration option provided by Django. For every 
standard Web application, there will be an administration 
page. If you have used any content management system like 
Drupal. you would have seen some kind of administration 
page that can handle many users, the database contents, etc. 
Django has a nice feature — by default, it comes with basic 
data model administration. We can customise this to handle 
many users and add additional features. You can leant more 
about the administration interface at bttp://docs.djangoptvject. 
com/en/dcv/intro/tuiorial02/#act iva te-the-adm in-site. 

You can view the SQL code used by Django internally to 
create tables by issuing the following command: 

«lyi>ui*ruKtbor.-/i.fY/t>ei:c«e« ..'•aruae.py sql student 

MM; 

COEME !«IE studer :er ( 
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1<9 IrT.tiJff *UTO.!WW«KT WT *UU m»t#t ttl, 
nut virchar(ai) M» nuil. 
gu.ifdl.iii turn varclur|»| Wt Mil. 
rsilm lotefcr MT NUll, 
Jhi»l* ■ d.Hf Oil filar K) 



Since the tables are already created by syncdo, we can 

work ott the data storage using data model objects. For 
debugging and learning purposes, we can make use ol tin- 
Django shell interpreter: 

»iyniii|ri»ckl»«-/i.rY/n*n»*aS i tinny r 

fytton i.«.4rc3 (rJ64re?:7H.»7. Oct 29 MM, c-:' 

(KC i4'.| on Unad 

Typ» '>*!p", *copyri}h;\ 'craglM* or 'Utma' fat aora In/omllon 

(imririiif namia) 

>» froa iwllawb.it ii<)s«t.aoil*H new. Stoo>n:l)«gl5'.vf 

»» jt«d*n!j*jact = S!udwtil*jl«tor( ) 

>» sindoni.oojKI nuc 

>» «tiKJ*n:j*)KI,gwrai«ii_ivia* ■ *S1" 

>» «t«dtfit._o6j' 

»> ttiKkn:_ot>J*i:t adamien.Mn ; T&i n dV 

>» «!»0>H!.0BJfCt MV(|( 

Iw ;ht oft)»: ' 

You can retrlva tn« objact Jnitancn for StudentRtgntar data 

Mdfl us sne following. 

?<n:fttgl\t«r.c6)fCtt.tni) 
t<S!u««n;(i»gii;ff: studcattegUter oojtct>l 

Ti • lit: of all : I .-;u:tr dan, 

If you need to get the object Instance for a particular data 
entry ivtch trial rollno-il. 

Hi i^t(tollne<4| 

If you need :o rtaova i: froa ce:«b*» i*t>i«, 
»> S.H-: 

We will now modify the templates and views to support 
database interaction. 

Add some more entries to the table by using student. 
object = StudcniRegtster() and save it using the student. 
objeci.suveO method. 

Replace the student Jist = {'SI':!. 52':2, *S3';3,'S4':4/ (me 
in the view function with the following code that grabs data 
from the database. 

froa r*lIo«»ii.*tiJO>nt.aoa>H taper. S'.udrn:Pr< 
ills: ■ Stiid«n;fteginer. objecti. elll I 
stuiten: 
for i in 

l'.udev. Ur.fi.iuael i i.roiino 

This will make it populate the siudemjht dictionary with 
entries from the daiabast'/Siudentftegister insionces. 



Run the development Web server and see the output. You 
can see that the table is populated with data from the database. 
It would be the same data you have fed through the Django 
shell interface. 

Finally, here is a task for you: Modify the template 
file and the view function indcx() to view all the data from 
the Studen (Register instances — i.e., the guardian's name, 
admission date, etc. Also write a page hup:// 127.0.0 1:8000/ 
hetlowch/postjdaia and a postO view function so that we are 
able to insert data into the database from a Web interface. Use 
the same statements we used in the Django shell interface to 
implement it 

This article has covered most of the bits and bytes at 
the basic level of Django Web application development. 
Once you get started coding in Django, you will definitely 
fall in love with it. The Django project website has 
excellent documentation available. You should always 
use http://docs.djangoproject.com/en/Li/ as the primary 
reference. E3f"* 
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In this age of innumerable GUI-driven utilities on our GNU/Lmux systems, we 
are bound to come across several command-line programs with boring and 
user- unfriendly text console-based operations. Wouldn't it be fun if we could 
add some GUI features to command-line applications without any tedious GUI 
programming effort? 



/""""""V" ressing up a command-line program 
J/\ with some form of a graphical skin is 
yF J possible with very little effort, using 
OC/ utilities like Dialog and Xdialog. We 
can use these for most programming languages 
like C. C++. Python, Ruby. Perl, Bash, etc, 10 
create GUI-based applications, without any GUI 
programming effort at all. 

In this article, we will explore how to turn 
our boring command-line applications into 
some spicier and more nsei t'liendl) (onus with 
a GUI. I used the Ubuniu 9. 10 64-bit desktop 
edition and Puppy Linux 4.2.1 to test the code 



and to generate the screenshots presented in 
this article. 

Dialog and Xdialog 

Dialog is a curses/ncurses libraries- 
based program that creates interactive 
text-mode graphical controls, or widgets, on 
text consoles. It can easily be plugged into 
existing command-line applications without 
the need for any serious programming 
efforts to turn text-based applications 
into interactive GUI-based utilities. The 
newer versions of Dialog are based on 
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ncurses libraries, so we can also use the mouse in 
console applications. There also exists a stripped- down 
light weight version of Dialog known as Ixdiatog, which 
is used in Linux kernel configuration. 

X dialog is the functional counterpart of the Dialog 
program that produces various widgets in X. It uses the 
GTK+ library for its functionality, which means that we can 
smoothly integrate Xdialog in desktop environments like 
GNOME. So, using Xdialog we can incorporate graphics 
mode widgets in our command-line applications. 

Also, for KDE. there exists a similar program like 
Xdialog known as kdialog, but we'll leave that out of this 
article. In fact, after getting the feel of Dialog and Xdialog, 
you can handle similar utilities pretty much in the same 
manner. So readers are encouraged 10 explore kdialog from 
the tutorial link provided under the References section at 
the end of the article. 

Installation 

To my surprise, both Dialog and Xdialog came preinstalled 
in Puppy Linux 4.2. 1. On Ubuntu 9. 10. the easiest way is to 
issue the following command on a text console: 




Figure 1:in(oboi widget in action 

First, let's learn Dialog 

Getting started with Dialog is straightforward — -think of it 
ds a command provided In oui shelf We \m\\ ide different 
common widget options with it to do different widgets 
operations. The general form of dialog usage is as follows: 

dialog «:caaon optioni> wio{*: <Miag«! op!iw.t> 



wdo i. dialog 

Ubuntu 9.10 also contains a utility known as 'Whipiail*, 
which provides some of the functionality of Dialog, but is 
based on the Newt library. I found Whipiail very limited 
with respect to the widgets it offered and the configuration 
options it provided. We will discuss it later on in the article. 

Installation of Xdialog on Ubuntu 9.10 involved more 
work. I had to install it from source as there wasn't any 
installation candidate for it in the software repository. To 
install Xdialog from source, 1 first had lo download and 
install the following .deb packages in the same order as 
shown below (note that Xdialog requires the gtk-1.2 series 
only and not other versions of GTK>: 

1 . libgtkl.2-commonJ.2. J 0-l8_alUeb 

2. hbglibl.2J.2.lO- 1 0. 1 buitdl_amd64.deb 

3. Hbgtkl2_l.2.W-l8_amd64,dcb 

4. libglibl.2-devJ.2JQ-W.lbtdldl_amd64.deb 

5. )ibgikl,2'dev_l.2J0-l8_amd64.deb 

Once done. I downloaded the latest Xdialog sources 
from its home page, uncompressed its tar archive and 
moved to the source directory that had been created by 
typing the following commands: 

• (dialog-! J. :.:«(■ bjj 
ca wuloa-? 3.: 

To finally build and install Xdialog. I ran the following 
command: 

./contgurt U Mk» U sorta u>< 

So we are now ready to play around with Xdialog. 



The < common options > are optional settings that modify 
the appearance and behaviour of Dialog widgets. The < widget 
options > are combinations of the required and optional 
sellings to create widgets. Note that in the man pages, the 
widgeis options are mentioned as box options. 

There are many options we can use with Dialog, but here 
we will experiment wit It just a few. I encourage you to tweak 
the remaining options. 

Some common options that we will use along with their 
functions are: 

• —backtitle ti t/estring - The bac kg ra u n d ca n va s o f D i a log 
widgeis usually doesn't have any text. By using this 
option, we can show some text on it. 

• -title tittestring - By using this option we can add some 
text as a title io widgets. 

■ —stdotit - By default, some of the widgets that emit an output, 
write it to the screen. We can use this option if we warn to 
gather the output, without having it written to the screen. 

• -begin ypos xpos - By default, all the widgets are 
positioned towards the centre of the text console screen. 
We can change that using this option, by slating the y and 
x positions from the top left comer of the text console. 

• —timeout see - All widgeis, by default, only return when 
Esc is pressed, if any of the widget buttons are selected 
and Enter is pressed, or if the mouse is clicked over any 
of the buttons. Using this option, we can tweak the default 
behaviour by specifying the interval in seconds, after 
which the widget automatically returns. 

• —sleep sec - This one inserts a delay for the specified 
number of seconds after processing the Dialog widget. 

■ ~- no-shadow - By default, a shadow is shown to the right 
and bottom of the widgeis to create an illusion of depth. 
Using this option, we can turn it off. 
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figure 2: msgt»o» widget with title texts 




figure 3: Pause widget with -color option 

■ -rotors - Willi litis, we can change (he video attributes of 
the Dialog titles' text. 

■ "insecure - By default, the password widget created by 
Dialog doesn't echo what we type on the text console 
screen. We can see typed characters echoed as asterisks, 
using this option. 

Let's now start playing with the Dialog widgets. The latest 
version provides the following widgets: calendar, checklist, 
dselect, editbox, form, fselect, gauge, infobox, inpuibox, 
menu, mixedform, mixedgauge, msgbox, passwordbox, 
password form, pause, progressbox, radiolist. tailbox. 
tailboxbg, text box, timebox, yesno, etc. 

Ill's explore sonic of these now. Run the following 
command on a console: 

dialog ■ infctai -inn tt }w! an infotw. «i*j»: <"*• dialog.' * 

As you can see in Figure I, this will draw an infobox 
widget vvith the information we specified. 

After creating the infobox widget. Dialog immediately 
returns the console prompt. As you probably have guessed, 
this widget's purpose is to display information and quit 
immediately. I've passed two zeros in the above command 
for the height and width of the widget — passing makes 
Dialog take care o( the widget's height and width. You can 
consider for the height and width, respectively, as very 



safe values, most of the times. 

You'll also notice in Figure ! that the infobox widget 
doesn't have any title text, neither on the message box nor on 
the background. Let's add the title in our next example: 

dialog migt Mar* title aagboi \ 

-uftni *1M> Is a aafooi alDget fro* dialog " 6 • 

Can you see the title texts in Figure 2 now? Also, if you 
press Ese, Enter or left-click on the OK button, then Dialog 
returns. We will look into these actions when we discuss the 
uses id Dialog widgets in shell scripts, Liter in the article. 

Till now we have only looked at some boring default 
colours for texts. We can change the attributes and colours of 
these text messages passed to Dialog simply by embedding 
\Z' sequences in different texts passed to Dialog, along with 
the "Colors option. Enter the following command to see it all 
in action: 

dialog colon oaekUtle .'<AZSc*u»\2n* \ 

<pautt *N»VZ41nis 11 • pnit wiao»: riot dialog.' 10 28 IS 

Can you see some colourful texts in and around the pause 
widget as shown in Figure 3? A pause widget shows a meter 
bar that keeps on decreasing with every elapsed second. If you 
don't press Esc, or hit the OK/Cancel buttons during the seconds 
remaining, the widget returns once the timeout value passed to 
it has elapsed. The various text attributes and colour values with 
I'lltlx-ikktl ' /' sequences in various title sitings are 

■ r : reverse 

• b : bold 

• u: underline 

■ n : restore normal settings 

• : black 

■ I : red 

• 2 : green 
» 3 : yellow 

• 4 : blue 

" 5 : magenta 

■ 6 : cyan 

• 7 : white 

We can also change the default titles of the OK and 
Cancel buttons, or show an extra button with the desired text 
in the widgets. Enter the following command to see these 
processes in action: 

dialog ■turr.ktltle Calendar - title calendar -e<trabut:on \ 
e»tr»la»el -C»t'a stefT :aawt«f" \ 

it*: "By* M" calrndar t a data* I • 

Take a look at Figure 4. We have inserted a new button 
and customised the texts of all the buttons here. We can 
move between different sub windows of the calendar widget 
using Tab, If you select to click on any of the buttons 
except Esc or hit the Cancel button, then you will see the 
selected date printed on the widget itself, This is the default 
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behaviour of all Dialog widgets— dial is. to return some 
valuefs). We can change ih is behaviour using the --stdout 
option, which is demonstrated in the nest section where we 
use Dialog widgets in shell scripts. 

We can also specify the starting locations of Dialog 
widgets and turn off the widget shadow. Enter the following 
command to see this in action: 

dialog --nO'DiMM -begi 

■i>1m» riwr swe'.rwig >x>u Utt' » fLOSS I 

If you check Figure 5, you'll notice that the inpuibox 
widget is drawn at the top-left corner of the screen, rather 
lhan in the centre. This is the property of ihe ••begin option. 
Also, the shadow has dissipated because of the --no-shadow 
common option. The inputbox widget shows a default string 
we provided on the Dialog command line, but we can change 
this string using the Delete or Backspace key and enter our 
desired input. 

Till now. we have entered all the Dialog commands on 
the text console, but there is also an option to read Dialog 
parameters from a given file. Using the —file common option. 
we cm put our commands in dialog -file poramfile form, 
where parafile contains other Dialog parameters. This way 
we can control our widgets through their respective parameter 
files only. 

We can also chain various Dialog widgets using the 
-and-widget option. Type (he following command to sw this 
process in action. Check Figure 6 for the output. 

du.it; »ul:ipl» dialog vldWl" \ 

:«g:n < * tint «o»u: ■ »io>:-j nm i • v 

)tt ••6*4i» IB IS - -title »v}te"2 -<Mf60i Stcwd Hi 
•M •«. moCoil mgtui TMrd >M 

-aiM-mca«t -IKfin 25 in -utl* l«f» • 
IBfcto- Tiler* trt aultlpit «I0j«:»." « ♦ \ 

■od mdett -Sum M 35 tilr Infotxwl lnfctoi ft he'f loo.* 9 e 

By now you must have a fair idea about some of the 
Dialog widgets and how lo tweak their default behaviour 

using various options. 

Dialog with shell scripts 

To incorporate Dialog widgets in new or existing shell scripts 
we need to put the Dialog commands in the scripts along with 
two other considerations: 

1 . The value a widget returns to furtiter process the script, if 
any; and/or, 

2. The return status of the Dialog command to see what 
keyboard or mouse action the user has performed on the 
widget. 

Use the —stdoul option in the Dialog command line to 
obtain the value returned by a widget. To determine the 
kind of action taken on a widget, we have to examine the 
inbuilt shell variable "?" that returns the exit status of the 




Figure 4: Calendar widgei with an e«tia hufion 




Figure 5: mputboi widget with the -begin and -no shadow options 




'- « — — 

Figure 6: Multiple Dialog wiogels 

previous command. 

I tie IiiI1iiv.mil; shrll si i ipi i niuiiiiii'*, llu-v (out I'jils willi 

some other Dialog widgets we haven't tried out yet. This shell 
script presents a menu with various options to select, and 
according to the options selected, information is displayed. 
Execute this shell script to see this feature in action. 

«' tuv 



• »!' IJtPlf S 

t).ij'uij;c-, 
side- -stdoiit 



coawid *n> coami opMoni. 
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•ln'coo> *»ouf cl»j»n directory » : {directory* I 9 



Figure 7: Example of how the shell script pops open the menu widget 




Figure 8: Teitboi widget displaying the content ol a selected hie 

• fWKtlM to MM> Open |.> .-.holer 

-t) ( 

i-i -K«mi clwice Ms Me selection ci«:c-3" \ 
S:r.: ittoci "to* -fNton • II 

> 

Sdlg Stltloo, "Selected Me content ' 

■ 



...j.-. ;o turtle itar ijjoeboj choice 

tlMtXWO < 

!!■»■. siSd.1 Ittoo Stitlug *nmu choice mi Tut aox.* Stitl "Select tut* \ 
u-*tx» "Ctoo» your firwurltt tw>* 1 V 

) 

if i » h • 1 

tten 

Mil) JtltlBo, "Selected :l»e Info" Stltl "floe tnfo* \ 
■ "lour favourite tlar Is : Stlne* * • 



> mm Midget ts iao« wriout cnoicei 

■ 3l9 s-.tK Itttlco, "0:*lii9 usage in iwll script* ttnl \ 

"Action misu* --mtoi ttrte o choice to proceed* t • \ 
1 •Opr- \ 

J "CMOU dlrr \ 

1 *S>10» I . \ 

) 

• ■« are IntorMied only in Ok tutton event. 

e«»J 
ttM 

• AM turvjlr th* MlCted Choice 

'Scholce* - V 1 
then 

Ufwltci 
»:i* t ■Mwiet' 

then 

din- 

till i -»CfiOU»- » •!• ] 

tueboi 

ii 



< fenctlon to Kindle choose directory choice. 
t() I 

dlrectory-S(Sdl( i-.teo Ul'.lbg \ 

"ivnu choice mis directory MiKtlon dialog' Ulti 'Select directory' \ 

-dMitc: - • e 

I 

then 

Sdlq Stltlof, "Selected directory M 



Figures 7 and 8 show what happens when you execute 
the above shell script. Do you see how by using Dialog we 
turned this otherwise boring text-based shell script into an 
interactive wizard? 

By exploring [he concepts we have covered so far and 
reading the man pages, you can use Dialog widgets in several 
ways, only limited by your imagination. 

Something about Xdialog 

Consider Xdialog as an X-based counterpart of Dialog. It 
refines Dialog widgets further with some extra options and 
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contains some additional widgets as well. Most of the time, 
we tan apply our working knowledge of Dialog to Xdialog. 
as it is. 

The general form of an Xdialog command is as follows: 

(dialog ««ci opt 101 

Here transient options are nothing but some Dialog 
options and other new options added to Xdialog. 

Let's now dirty our hands with some Xdialog widgets. 
shall we? Issue the following commands: 

(dialog -ttmitU 'tolorstr ••ItlU 'Color Selection tfWpef \ 
■-colorw] *0nett your f»voorite color* ! 3 :j] .'M « I 




*"?■"""— 



■■ ■■■^^M^^I'^gLa^^lMM I B^— *aC"**B_J 



Fiflure 9: Widgets provided By XAalofl 



ltdllaeg tlon widget' \ 

••fennel •tun ::• t o i 



(dialog btrJUitl* 'J/ang-twi' title '3 «1»0* Selection Udgef \ 
3r ****** "Select your value** 8 • »r»l « St W wcond J •» M N 

third 4 «: « i 

l-'igure '1 shows the corresponding Xdialog widgets. See 
how easily, with just some single-line commands, we are able 
to produce some true graphical widgets like colour selection, 
font selection, and range selection dialogue boxes? 

(X)dialog with other languages 

We can use Dialog and Xdialog from any programming 
language that supports calling external executables. The 
advantage lies in the fact that we have a way to add graphics 
to our programs without much effort. It could also serve as a 
way for rapidly prototyping GUIs. 

Let's look at how to mix what we've learned, with 
Python scripts. Take a look at the following code snippet, 
where we create various widgets in a mixed manner. First it 
asks you the password key (that is. Ifyrockz) and then after 
taking some more inputs, it provides a message to you in 
the end. 

Please note that in the dictionary of Dialog and Xdialog 
commands, the various parameters are separated by a pipe 
character (T) to allow spaces in the various strings we pass. 
Copy the following code to a file (filename. py) and run it 
using python filename.py From a console; 

• • /u*»/tU"/eny fythooj* 

froe luoprccess lacort Pope". PIPE. STOUT 

• dictionary to hold Mrloirs dialog and (dialog coeaanoY 
dudgtu-- 

| 'dUlogl itdout | ■- intecurel ■ tacit LtlelPaMWfOlertfiiJoet.1 ' 
.-lt|j>iti«ordt>o-|..j>-SMorab»|EMtr [br kevKI**), 
'idlfnat' : '<«i*loa|.-tit>|>K-nitcc-l Kjuteoltnte- your n**e|»|r. 
••dlgdotr : -«di*log|--tr.lt|Xcaltndoi|- -ilcndiristltct yo»r B0»|»(»', 
-dlgtat' : t'dulegl -stdixitl -WektltlalTliaeBoawegetr 



•>lti«-!»ti t:arfti>i»:t am or Mr:h|«)*', 
'u»;' : '>U4l0il< tit>|uigBo>| «gt»»|e*t«<g*|0|g , >. 
J 

def *<«ut»;«0iwnd): 

Routine co oiKutt • ceaaaM string and return i output, error, stun) 
of tti* ccaaand. 

1 i «oa«and : 

p = Pcper.(l, ttdour. i*90uT| 

to* - p.coam- 

return lt-«t«], toe|l|, p.relurncofle) 

def uln[ J : 

utiae, 

tpwd = *iecvite(di«lgtsatrD['dlgp*i«l')| 

t«f- 
t**= II 
ttt» ■ () 

tna* = •tKut>(dMdttutrbI'idl«N»1) 

ir not tr*»[»): 

tdoo « eiKuttldkdttutrbl'i'dlfjori'li 

If not tdotf?! 

ttai ■ rircJtf|dM!}tMtrB''diglW|l 

If not •• 

*W| i ('HI ■ • t-ae'ei itrtpO • 

'Your bob it . • • :<m;o; 

'Tu» of Birth it : ' ■ tt«t[B).!f 
'irr alffttl you the kj 
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Figure 10: Dialog passwordbox and Xdialog mputbox widgets 



Figure 1? Whipiail and Zenily in 




Figure II: Dialog ttmeboi and Xdialog msgbox wtdgets 



Figure 13: Gtkdialog and Xmessage in action 



tiKutrdMftMtrbl'mal.rtelKfl'Wiugt', u»ij!) 



DMMOroDo< *En(«r your puiMrig" It t 



vnq ■ 'Incwrect paswofd. better luck w: :iar.' 

It ' _«!"__' 



Mtn|| 

Figures 10 and 1 ! show what happens when we execute 
the Python script— note the co-existence of Dialog and 
Xdialog widgets in the screcnshois. 

Some other similar utilities 

In this section, we arc going to touch on some other utilities 

similar to Dialog and Xdialog. I found gtkdialog and 
xmessage p reins tailed on Puppy Linux, and Zenily and 
Whiptail came preinstalled with Ubuntu. 

As mentioned earlier. Whipiail provides fewer options and 
widgels th.tii Dialog. Il only provides yes no, menu, input. 
message, text, info, checklist, radio! ist. gauge and password 
boxes. Type the following command to sec the password 
widget of Whiptail in action: 

WtfUU Pm»W(! *)«*:■ \ 



Zenily is another utility we can see as a subset of Xdialog. 

It provides some decern GTK * widgets and common options 
in terms of functionality. Type ihe following (iimnunds in see 

It in at t ion: 

Mnily into -!*«t;"TMi Is m info trot Z«uty.* * 

■-■TM» li * hwhibj fro* Zrntty.' * 
:oa fro» ZMU ■ 

Now take a look at Figure 12 to see both Whiptail and 
Zenily in action. 

Coming to Xmessage, it's actually a command to provide a 
very limited-functionality GUI widget. It only shows a message 

with user-defined buttons. Run the following command: 

nesug* -Uf -/.Msftrc tuition 'Ok::, C*--:c::3. Nclo:]' ear: nftinuus* 

The -file option reads information from a supplied file; and 
we create various buttons by providing a comma separated list 
of litJe.'neturncode to ihe -buttons option. On clicking a button. 
the corresponding return code is returned. So on the basis of 
ihe returned value, we can do further processing. 

The functional iiy of Gtkdialog is very different from 
all the utilities we have discussed till now. This one creates 
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various widgets from ait XML- tike description, known 
.is Dialog description language. Through this description 
language, we can create very complex Dialog boxes 
containing other widgets and boxes. The downside is that it 
involves much more work compared to wltat we've discussed 
(ill now. 

Copy the following code in some file and save it with a .sb 
extension, say fttenome.sh: 

• ■ /uir/Bln/ene task 

• au.c-j alteration assigned :o m tmxrom*t\tX virtiMt. 
tipor: »AH DIA106*' 

ii'.lichutS'.r > 
<!at»I>Ti«i Mi jr*. urn; It cvw. IkecgN 1 1« w»»:nn; Kit :o Uf.</Uftel> 

■ 
<Je6«I>"-:|MPlOSS 'ill! t tt\ttlt> < ><rt»*«/leb«l> 

<tatten okx/Mit:on> 
<tartten eweelx/*uit«i> 
4AM» 

</v«oi> 



glkdlaloaJ -proigrw^lUlii.DIMK 

Now. make (Hename.ih executable and run it 10 see 
Gtkdiatog in action, 

Figure 13 shows the outputs after executing the Xmessage 
and Gikdialog commands/scripts. 

So we have seen how we can transform any command-line 
application into a user-friendly graphical application. This is 
not only useful to put life into older console-oriented utilities 
bin also l«i ilie ptofir.tms you write yourself. In l.iu. m.inv 
existing GNLVLinux applications, ranging from installers to 
kernel configuration utilities, employ these utilities. EO^*^, 

/ \ 

Resources 



dialog home page: inmibie-isiafKi.nei/dialog 

Xdiatog home page: AroSafcig.oyis.nef 

gtkriatog home page: ltr*jKptG.txit~pipas/gtkdi3logfirKiex,html 

kdialog tutorial: techbase.kde.org/Derelopment/Tutorials/ 

Shett^Script^j^h_KDE_Di8togsMr>!ro<tuctica_an(t_Scope 
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HEDH Calling... 



Share your knowledg 



Inviting FOSS experts to write articles 
on their area of interest 

LFY covers a myriad of topics — network management, software 

development, embedded systems, community issues, and even hands-on 

guide tor newbies. it you've got an interesting topic, let us know. Thanks 

to the launch of linuxforu.com we are now trying to extend our 
content portfolio related to Linux & Open Source. 

To know more on how to become an LFY author, contact us at 
lfyedit®efy india.com 




Few topics that top our list 

♦ Tips 'n' Tricks for software 
developers or IT implemented 

♦ Cool tweaks for FOSS enthusiasts 

♦ FOSS on mobile 

♦ virtual isat ion (Implementation) 

♦ OpenJDK or Java on Linux 

♦ OpenSolaris (software development) 

♦ How can I do 'that' on Linux 

♦ Reviews of latest open source 
projects & tools 
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The Salient Features of the 

Consumer Electronics 
Linux Forum Specifications 
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From a handheld device that sits comfortably in your palm, to the majestic LCD television that adorns 
the walls of your house, consumer electronics has become ubiquitous in today's world. Embedded Linux 
is gaining momentum because of the advances in audio and video technologies, and the user friendly 
features of Linux, Hence, understanding the significant features of Linux in order to use it in embedded 
devices is critical lor the Linux developer community. Here, we touch upon the salient features of the CELF 
specifications to expand your knowledge on Linux in the embedded arena. 




' y 2015, it is estimated thai on an average, there 
will be fi vi! consumer electronics devices per 
person in the developed and developing world. 
That will add up to more than two trillion 
devices. II these devices are to be Li mix- powered, then what 
are the important features thai Linux must have? 

The CELF (Consumer Electronics Linux Forum) 
community has provided guidelines in the form of CELF 
specifications, which focus on the significant characteristics of 
Linux for CE (consumer electronics) devices, Linux has many 
desirable features that can be used in embedded devices. The 
top device manufacturers — Sony, Toshiba, NEC. Panasonic, 
Sharp, Samsung and Philips — have come together to form 
the CELF and draw up (he specifications 1 1 ). 
The CELF specifications focus on: 

1 ) Boot-up time reduction 

2) Power management 

3) Audio and video specifications 



4) Real-time characteristics 

5) Size reduction 

6) Linux security 

An embedded Linux developer needs to understand how 
to enable features such as a tickless kernel or device power 
management, and what can be expected if the feature is in the 
build. On die other hand, an embedded system architect using 
Linux will find enough juice in this article lo comprehend 
lite broad focus areas, while designing a product powered by 
Linux. We serve ready-made and easy-to-use information for 
the embedded system architect, Linux developer and avid 
reader who want to dig deeper. 

While analysing the existing features of the CELF, this 
review aims to provide a good description of (he features, 
along with information on whether the feature is integrated in 
the mainline version of the kernel. We will also show you the 
options to enable the em bed tied Linux features. Experimental 
and reported data will be provided to throw more light 
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oii i lie use of certain features in ihe devices, and industry 
environments thai use these features. 

Let us begin with getting an insight into the salient 
features of Ihe CELF specifications ( 1 1. Due to the volume 
o! information thai needs to lit- presented, we have split the 
article inio two parts. In Part 1 we will discuss boot-up time 
reduction and power management. We will focus on real-time 
characteristics and size reduction in Part II. 

Boot-up time reduction 

The need for a reduction in the boot-up time is obvious. 
People want to gel staned fast. This is more so if you are 
talking about a handheld device or a television — users expect 
them to work as soon as they are turned on. 

Tim Bird, chair of the Architecture Group in CELF [2], 
said that there arc four principles of reducing boot-up lime. 
Whatever you do during boot-up: 

• Do ii fasi (see if you can speed up an activity during boot-up) 

■ Do it in parallel (gel things done during boot-up. in parallel) 

• Do it later (postpone unnecessary activities that are 
traditionally taken care of during boot-up) 

■ Don't do it at all (see if you can avoid doing an activity 
during boot-up) 

There are multiple ways in which you can reduce boot-up time. 
Lei us explore each of the following techniques in greater detail: 

• XIP 

• IDE no probe 

• Disabl ing console output 

• Delay loading drivers 

• Smaller kernel 

• Excellent quick boot 

XIP 

XIPsiands foreXecute In Place, which means executing 
the kernel in the same place it is stored (i.e., from the ROM, 
persistent memory storage). 

XIP comes under the 'Do it Fast' category — while 
performing an activity during boot-up, find ways to finish 
it quicker. In the conventional method, the kernel image is 
copied from ROM to RAM, uncompressed in a different 
location in the RAM and then executed. (See Figure I.) 

But XIP is a method for executing code directly from ROM 
or Flash, without first loading it into RAM. Kernel XIP refers to 
the capability for a Linux kernel lo be executed directly from a 
persistent, read-only memory or media type (Figure 2). When the 
kernel is executed in this fashion, the boot loader can avoid loading 
die kernel from persistent storage on to RAM, uncompressing it, 
and saving it into the system RAM [3], [4] and [5|. 

This will impact start-up time, RAM and ROM footprim, and 
execution performance. Reduction in bool-up time occurs mainly 
in two phases. The lime it lakes to copy die kernel image from 
ihe ROM to the RAM is reduced, in addition to a reduction in the 
time it takes to uncompress the image after copying it on to RAM. 
For a slow processor, this can lake around 1.5 to diree seconds. 

Kernel XIP has ihe following advantages, with some 
overhead of running the kernel due lo frequeni access of 
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Figure 2: Different phases involved in XIP procedure 

Flash memory; 

• It provides faster boot-up lime by reducing the time to 
copy from ROM lo RAM and h\ completely eliminating 
decompress time. 

• It also has smaller RAM footprint since die kernel text 
portion is not loaded in lo RAM. 

IDE no probe 

Linux probes for the presence of different sectors of the hard 
drive, the USB, SDRAM drive and other such drives. This 
lime could be saved if we disable the probing of the unused 
drive, by using ide no probe = <x> (where <x> is the drive 
name) [61 and [7]. Data provided by Ttm Bird says thai the 
time to probe an empty IDE (Integrated Drive Electronics) 
device is approximately 1.3 sec [6]. 

"IDE no probe' comes under the category of 'Do it 
Later' — see whether you can postpone an activity done during 
the boot-up |(.|, I" | .mil |8]. 

Disabling the console output 

The console output can be disabled fur faster boot-up time. 
In actual devices or in production times, ihe console oulpul is 
noi needed [9]. Console output can be disabled wiih the quiet 
argument in die Linux kernel command line (boot loader sellings): 

tOO'.'/*rv/r«* r» mi: = .'«»rtup 
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You can still see the messages through the dmesg 
command. Disabling (he console output comes under the 
talc gory of 'Don't do it at all" — sec whether you can postpone 
an activity done during the boot-up. 

Delay the loading of drivers 

The loading of a few drivers can be delayed and this can also 
considerably reduce the boot-up lime. For example, certain 
drivers can be loaded later in the boot sequence or in parallel 
with other drivers or applications. This conies under the 
category of 'Do it Later' [2]— see whether you can postpone 
an activity done during the boot-up [6]. 

Smaller kernel 

The Linux kernel will load faster if it is lean and trim. In thai 
sense, the CF.I.F's specification on size reduction. Indirectly 
contributes to boot-up time reduction also. 

Trie Linux kernel is designed for servers and desktops. 
Embedded systems are dedicated systems and hence Ihey 
do not require many features that are applicable for servers. 
During kernel configuration, we can disable kernel features 
1101 required, which results in kernel size reduction. Further 
information on having a smaller kernel is provided in the 
second pan of this article. 

An excellent instant loading technique 

Boot up the kernel, start all the applications and the user 
interface, then sus|»et»d to disk or Hash in the same state. When 
the device is booted again, the system state is restored from 
this predefined hibernation image. This technique is followed 
in the Sony Digital Still Camera and a few handheld devices. 
With this technique, it is possible to achieve instant 'Power 
On' in less than 400 msec (3). 

Power management 

One USP (unique selling proposition) consumer el ecironics 
device manufacturers certainly need is low power 
consumption. Power management has gained significance of 
laic because of the importance given to longer battery life in 
handheld devices and mobile phones, and also because or the 
campaign to turn green. What is the cause of higher power 
consumption in CE devices? 

Well, if you were to dig deep into the roots of devices and 
circuits, you will find that power consumption in embedded 
devices depends on three factors. 

1 . Leo ka ge c u rren t power d issi pat ion 

2. Dynamic current power dissipation 

3. Short circuit current power dissipation 

Leakage current power dissipation is due to the flow of 
leakage current and this is dependent on operating voltage [ I]. 

Dynamic current power dissipation is due to the flow of 
dynamic current and this is the most important form of dissipation. 
This power dissipation will occur when the device is active, and it 
is dependent on die operating voltage and the frequency of input. 

Short circuit current power dissipation is due lo the (low 
of short circuit current and it is also dependent on voltage. 
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Figure 3: Option to enable frequency seating during kernel configuration 
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Figure 4: Option to enable the licktess kernel during kernd configuration 
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Figure S: Power Top output when t laptop run) on battery power supply 

Among the three forms of power dissipation, only dynamic 
current power dissipation is proportional to voltage and 
frequency (| t ] and (SI). 

The principles of power management are: 
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1. Scale down (to reduce the voltage or frequency) 

2. Cut o If (complete! y d i scon nect the voli age or 
frequency) 

There are different methods with which you can take care 
of power management factors in CE devices. They are: 

■ Dynamic voltage and frequency scaling (DVFS) 

• Tickless kernel 

• Power Top (power consumption monitoring tool) 

■ Suspend/resume 

• Device power management 

■ Dynamic power management 

Dynamic voltage and frequency scaling 

The bottom line is that power dissipation can be reduced if we 
reduce or cut off the voltage or frequency. There are certain preset 
values for the voltage, current and frequency for each device-, 
device slate and set of inputs. This is called the operating point 
(OPP). This operating point can be dynamically set when (he 
device is working. This is called DVFS (dynamic voltage and 
frequency scaling). The option to enable frequency scaling is 
shown in Figure 3. In fact, DVFS is about dynamically changing 
the operating point (OPP) to suit execution environments [3|. 

The tickless kernel 

The system produces a timer interrupt every I ms (if the timer 
frequency is set to 1000 Hz), and when this interrupt occurs, 
the CPU stops what it is doing and executes the timer interrupt 
handler function. In the interrupt handler function, there are 
different tasks to be done, such as checking if there is any 
oilier higher priority task to be done 1 10). 

On an idle system, tlve processor wakes up every lime a 
timer interrupt is received, only to find that there is nothing 
else to do. Can we disable the limer iniemipt when all the 
processors are idle, and enable it only when there is something 
10 be done or when there is an interrupt? 

If we do this, then it is called a tickless kernel. If there 
is less work to do in the device, the tickless kernel sends the 
processor into sleep mode whenever it's possible, and this 
reduces power consumption. Figure 4 shows the option to 
enable the tickless kernel feature. 

There is reported data available through the ELF Conference 
about a machine working on Intel Core Duo at 1 000 1 1/. A 
comparison was made of die CPU idle residency — with and 
widiout ticks. It was found that when the number of intemipts 
was reduced by 20 times, the CPU idle time increased by 10 
times, which would result in considerable power savings. 

Power Top 

Power Top [ 1 1 J is a utility that can give you the top 10 power 
consuming tasks in the system. It is only a power consumption 
monitoring tool to guide you to optimise the application 
that is consuming more power and bring the overall power 
consumption under control. Figures 5 and 6 show the output 
of the Power Top tool when a laptop is i mining on battery 
power supply and when it is connected to the main power 
supply, respectively. 
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Figure 6: Power Top output when a laptop tuns on the mam power supply 
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Figure 7: Option to enable suspend lo disk and resume 
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Figure 8 Option to enable suspend to RAM and resume 

Suspend and resume 

The kernel provides hooks and device drivers to support 
suspend/resume operations when there are long periods of idle 
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Figuie 9: Option to enable 'CPU Idle Power Management' support 

lime on a device. You can also trigger the system to go into a 
suspend stale by issuing the following command: 

term in > syi/pa*' 

The suspend/resume activity comes under the category 
of static power management. When in a suspended state, the 
system slows down or stops various clocks, removes power 
for devices or places them in a low- power state, thus lowering 
the core operating voltage and stopping the CPU. The power 
management subsystem in the 2.6 kernel implements a kernel 
API for system suspend and resume with limited support 
for choosing a specific system suspend slate. The 2.6 sysfs 
fdesystem exports interfaces that applications may use to 
suspend the system [3] and [12|. 

You can suspend to disk and resume (which is called 
'hibernate') or you can suspend to RAM, as is done in many 
handheld devices. Figures 7 and 8 show how to enable these 
options during kernel configuration. 

Device power management 

It is a hardware or software mechanism that triggers a device 
into a low-power slate after a period of inactivity. For example, 
a driver powers down the device because applications no longer 
hold an open reference to ii. When the last open file descriptor 
for a device is closed, then ihe driver may suspend the 
device. Figure 9 shows the option to enable 'CPU Idle Power 
Management' support. 

Dynamic power management 

This refers to the dynamic control of clocks and power 
supplies, the adjustment of timer licks, voltage and frequency 
scaling. This basically means power management when the 
device is active (i.e., when user applications are running). This 
can be done based on the processing load. Device drivers and 
operating systems can also contribute to the dynamic power 
management by reducing the speed of disks when the system 
is idling. Dynamic power management uses a combination of 
both user space and kernel space software. 



In dynamic power management, you adjust power 
parameters on-the-lly when simultaneously making sure real- 
time requirements are satisfied. This uses recent improvements 
in hardware to scale clocking information and required 
voltages with reduced latency [131 and | I4j. 

Dynamic power management focuses on quick application 
restart after standby, automating system parameter, where the 
power parameters are automatically selected based on CPU load, 
the number of high priority tasks existing, etc. Ultimately, more 
flexibility is available to die systems designer in constrained 
working environments such as the consumer electronics devices, 
in order to control die system parameters [3] and 1 15]. 



D 



Note: We'll discuss real-lime specifications and si/.c 
reduction next m on lb. E3f"^ 
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A seemingly minor change in how a program is written can bring about a major 
performance up-grade or vice versa. This article discusses a iew techniques to 
write efficient and optimised C or C++ code. 



/7W] efficient code requires: 
f~\/f (a) the selection of the 
\/\/ best a 1 gori ih ms and da la 
C/SJ^' struct u res. a nd (b) code 
written in a way that the compiler can 
elfeciivety optimise and generate the 
best executable. 

Ideally, any standard compiler 
takes whatever code you supply 
to it and tries to generate tite most 
optimised executable possible, on its 
own. However, this is not the best 
practice — a very limited transmutation 
happens because of many blockers. And 
prominent among these optimisation 
blockers is machine-dependency— that 
is. its dependency on the tow-level 
architectural details of the machine. 

Optimising memory references 

Performance can depend heavily on 
many lineaments of the processor design. 
Therefore, to maximise the performance 
of a program, both the programmer and 
the compiler need to understand the 
t.iTi>et ,irt biu>< litre. Understanding the 
instruction set is another effective way to 
find out how the code will run. i.e., how 
frequently memory is referenced and 
how effectively the machine registers are 



being used. Let's consider the following 
code snippet: 



functions. As an example, you can 
consider the following two (unctions: 



void roj (in! 


■v> 




•018 r«0(CIU' 




1 






{ 


























' 




return, 








»rmt|-v 










1 






void apt 


In) 


'») 


VOW O0t.fOO(C' 




1 






i 














»«t c:r, leu - itrlm(ftr); 












ferfctr « 0; cu 




1 






} 







Although both the above functions ( 
foo & opijao) have identical behaviour, 
optjbo is more efficient. Let's see how. 

The function foo requires five 
memory references (one read of *x, 
two reads of *y, and two writes of 
*x), whereas optjoo just requires two 
memory references (one read of *y, and 
one write of •*). 

Avoiding unwarranted 
function calls 

Aimiliri performance blot kei m,i\ 
happen due to unwarranted calls to 



Which of the lines of code do you 
think is better? 

foo() calls the library function 
strlenQ multiple times. However. 
irrespective of achieving a similar 
result, optJboO calls strlen() just once. 
I lere's how a function call works... 

Lath function code runs because 
of an immediate change in the value of 
the program counter (pc). But before 
jumping to call (he function from its 
current state, the current value of pc, 
along with other values, needs to be 
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saved on to a slack. After a return from 
the called function, the program counter 
gels restored for leftover instructions. 
This is context switching at function 
level. This consumes lime and memory. 
Needless 10 say, the function optJooQ 
is more efficient and faster than foo(). 

Let's consider another similar 
example: 

I 



rttuta c«lc(i) • ulc(i); 



I 



im «p'..fM(int «) 

{ 

rtiun J * cilc(«|. 

You may be tempted to believe that 
opiJoo() is better, because of its less 
number of calls to cak(). Right? Well, 
before you conclude anything, first 
have a closer look at function calcQ to 
understand what it actually does. 

/• giotu; v»u*>;» •/ 
in: nit 

r«iurn ctf ' >; 

The variable cir in ihe above snippet 
is a global variable, and cak() modifies 
it. Hence, /oof J and optjoo() do not 
compute the same result. For example, 
lei's assume that we call foo() with 5 as 
(tie argument. /onfj will return 15 after 
calculation. However, opi_foo() with 5 
as its argument will return 10. 

So, the moral here is, although 
unnecessary function calls should be 
avoided, a careful logical analysis is 
also necessary. Otherwise, you may 
land in trouble with unstable and 
unpredictable behaviour of the system. 

Use of unsigned integers 

If you are sure that the value will 
never go negative, using unsigned 
integers is advisable, as processors 
can handle an unsigned integer better 
than a signed one. 

Most of the mainstream C/C++ 



compilers, by default, implicitly consider 
an integer declaration as signed— i.e., 
ml x will be considered as signed int x. 
Therefore, it's a good practice to always 
declare such variables explicitly to avoid 
any confusion. 

Branch prediction 

Another technique to tune your code 
and get a performance boost is branch 
prediction. It is the software's ability to 
bint to the processor which way a branch 
(the if-ihcn-dse structure) is about to go. 

According to Wikipedia, "A 
branch predictor tries to guess which 
way a branch will go before this 
is known, for sure. The purpose of 
the branch predictor is to improve 
the flow in the instruction pipeline. 
Branch predictors are crucial in 
today's pipelined microprocessors for 
achieving high performance." 

To programmers, the CCC also 

provides a built-in function builiin_ 

expeciQ and based on iis two macros — 
likcty() and untikety() — indicates 
the branch prediction information to 
the compiler. This way the compiler 
generates a more intelligent binary 
where the expected result is favoured. 

The following lines of code 
demonstrate the use of the likely() and 
unUkelyO macros: 

food; 
opt. 'm(I; 

Memory alignment and padding 

Quoting Wikipedia again, "A memory 
■iici-v. is said to be aligned ulien the 
datum being accessed is n bytes long 
and the datum address is n-byte aligned. 
When a memory access is not aligned, it 
is said to be misaligned." 

An aligned memory access will 
have a less number of memory access 
cycles than misaligned memory access. 
Therefore, to ensure that memory is 
correctly aligned some irrelevant bytes 
are inserted In [he compiler rhis 
activity is known as padding. 

With data types like struct, any 
standard C/C++ compiler tries to add 
padding. Let's consider the following: 



typteV «truct{ 

CM' c: 

tnoil i; 
[iinpli.l; 

:yp*o>r «ruct( 
clur c. 
tnort i; 
in: I; 
lllMUll.1 

Considering that a thai takes I byte, 
a si 10 n takes 2 bytes, and an i lit lakes 
4 bytes. vxample_l will consume 12 
bytes. However, cxampfc_2 will only 
take 8 bytes. This is because, in the 
above code snippet, the compiler tries 
to align the structure in the power of the 
size of an integer. 

Hence, in the first case (exampk_l), 
three 4 byles are assigned. However, in 
the second case {cxamplcj?}, since a 
char and a short is accommodated widiin 
a single 4>byte boundary, we have a 
structure size of 8 bytes {4 bytes for char 
and short, and 4 byles for int). Using these 
kinds of small tweaks you can always 
save significant amount of memory. 

For further details on this topic, visit 
en,wik ipedia. org/wiki/Daia_si ructure_ 
alignment. 

A final note 

I've only discussed a few common 
techniques here. There are many other 
ways (including many processor- 
dependem techniques) to line-tune your 
lode. 1 hope the examples in this ai title 
will inspire you to explore them on your 
own. E3f" V 



Resources 



• WMapedaon branch predctor: 

en. wtdpocfa<x9faWBanchj}nxtctQf 

• Wikipedia on data structure 
alignment: eft.wtiapedia.arg/wtia/ 
Data^stniCtvrejalignment 
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A Programmatic 

Introduction 

SCTP 




Since we've acquainted ourselves with the features and advantages of SCTP last 
month, let us put the concepts to practice by running through a simple client-server 
program using C 



•* >OCTP socket APIs liave been 
x^ ^y designed to maintain consistency 
A with existing socket APIs. This 

C_»^^ helps in migrating existing TCP,' 

UDP applications with the least effort. Let us 
have a look at some of them. 



Q 



Note: SCTP provides two different API 
1 styles: one-to-one, and om-to-many. 



Currently, we are looking only at the one-to-one 
scenario since it enables existing TCP applications 
to migrate to SCTP with minimal changes. 

m: «octn(«.i«T, socx.stkm). imtm.scrr). 

Once an endpoint has been created using the 
socket call, it has to be associated with a local 
address. This is achieved by invoking the biml() 
method: 

binnim: id, ttruct Mctiddi "iitdr, wctlMJ KMrltn); 

Once a transport address has been associated 
with the socket, the listen method must be 
invoked (by the server application, i.e., one 
that is expecting inbound requests for new 



connections), to prepare the SCTP endpoint to 
accept inbound associations. The syntax for the 
fi'sjcrr call remains the same: 

U"'. »S. in: EJtkloj!. 

backlog represents the maximum number of 
outstanding associations allowed in the accept 
queue of the socket sd. 

Server applications use the accept method to 
accept inbound client connection requests. The 
syntax of accept is: 



climt.itf = «cwpt(lnt \6, »:ru:; 



■:•>;!< -i'.'.t •:- I 



And, client applications use connect to 
initiate an association establishment sequence: 

U: comKt(liti -A, conn lime: m\*Mi ■»Mr. lactltnj 
mdrlm): 

Unce a new association has been established 
between peers, most of ihe normal send/receive 
socket APIs can be used for communication. For 
example, if we consider sendmsg/reevmsg APIs: 
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tiat.t wnosfllnt M, cant ttrjcl mr/or '■»»■. U* n»j»i, 
I »<jMr 'anuge, in: tugtj; 

Note that sd is the socket descriptor of the endpoiiu. and 
message is the pointer to the msghdr structure that contains 
tin- user message and ancillary data in the formal: 

Urge: atgbdr ( 

win •no.r-wr-. 

•HI_n»i*l»n; 
. vk '»s|_lov; 

void ••'.!) ..controi. 



this is set, any invocation of closeQ on live sockei will initiate 
an ABORT chunk to the peer. For example; 

Itruet ilngtr ling-": 

Mtwckopt ,'M, SOL.SOOdT, SO.trUEI. l.trj ilMof(ltng)), 

The final picture 

I. el's use a few o( the above methods and write a simple 
cliera-server program. The client sends a message to die server 
application that is echoed back by the server. 
Tlie following is the code for server, c: 

•tncluo* <s:dlo.n> 

•lnelw!* <im 
•inc'ir- 



...where: 

• msg^name speci h es t he poi n ter to the socket address 
structure. 

• msg^namelen speci Ties the size of the socket address 
structure. 

• msg_io v i nc 1 udes a n array of message bu f fers. 

• nisg_iovren specifies the number of elements in the 
msg_iov structure, 

• msg_control speci lies the ancillary data. 

• ffisg^cowroHei) specifies the length of the ancillary 
data buffer. 

• msgjlags specifies the flags on the received message. 

Setting socket options 

Socket options can be set using ihe smactorjt call— that is. 
options like enabling/disabling events (SCTP_E VENTS). 
RTO info (SCTP_RTOlNF0), the number of in/out streams 
(SCTPJNITMSG), etc. For example. SCTP events can be 
enabled in the following manner 



:rit» even:;; I' Structure Oefmrt In ntt/jctt/uwr.fi V 
eventi.Ktp • :e» In tnp »y*M, > 

events. Ktp.uwcli' 

•wntl.tttp_p»«r_e" 
mnti.utp.idipUon . 
•vwiti.tetp.jJwtdoMB.r. 
eventl.sctp pirtlai «ellv*ry.ew 

w:t«ko«t(u. ippboto.sctp. sctp r.wis. (event*, jueoftewn:*)): 

Closing the association 

A simple closc{) method Invocation will initiate a graceful 
shutdown sequence (the SHUTDOWN chunk). But in case 
we need to close the association ungracefully (i.e., send an 
ABORT, instead of a SHUTDOWN chunk), we need to set lite 
SO_LINCER sockei option using the setsocAtowt method. If 



•Include <»vt/tvc»«.h> 
xket.ri> 
'include «wtln«t/ln.r» 
•Include <»rp,i 
unclim* <K[p.n> 

M to handle SCTP CvenM V 
void tumd!o_e»en!(vold *»uf) 
I 

itruet ic.p.assoc.ctitnge 'eiwc.chioge; 

Itruct «ctp_Mnd_f»ll«d "sen 

ttruct ictpjwJdr.cnenoe •«? 

ttruct Ktp.rewte.error 'rraotf • 

union KtfUMUHUW 

ion *|buf; 

twtcti [not:f->sn_t*is«(.5r._tvp«l 

{ 

c»w SCTP^SSOC.CWWt: 

•sscc.ctunge ■ Inotlf'sn.assoc.clunge,' 

soc Ounge: iUtt. yu, error: tu, ln«rM»s: vu ' 
"outttreMn: ar> )e >*K_ttete. ptMC.cnonge- 

aiwc. change •>MC_ln*owvJ_t"eiM, nsuc_eh»ge->UC- 
oittouad.ttreaM); 

CU* SCtP.SEM.fMUTD: 

itnd.fajled - tnsii'-Mn.MAd.rtlM; 

cantfrsend ruled: ten: lu err: «d\n-. iend_*»ll»d >si»,:engtn, 
una. fulM >ssf. error); 



I m jcrp pn mm MM 

*Mr. change « I ■ .cnonfe; 

1* taddr .change *spc_aa*!r is.fiiliy = tfJMEl) 






ttruct KKkaOO' 
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CM' *Mrbuf[:kET«.«*WTmM); 



const chjr •m = iwt.nte*!*' ■•.ln.*ldt, 

idorbuf. iwrs.MtWTKifM, 

«*r *Mr Chinee: *» lUte: W. error: VJ\n", «p, 
*ddt.ck««9t->5pc.it»;f, »*tr .change -«pc_errof); 



MM tOt MD MM 

r«*H«.tTror = 4nouf>»t..re»o> 

pitcm(r«ott r i. ntcM(r»»w«_e»Tor->«0«<llh)); 



am xn.»moiA_c*\i 

ore**; 



/* tMD.' 

tiruci tttp.event.juliKrlt- 

♦v*nt.«tp_4jti.lo.t* 
eYWit.Mtp.Miecutlon.evr 

J_f*ilur*_*vr ft 
*wnt.«ctp.pe*r_e"OT.e«-i 
»ven:.*r.tp_jf>u:dc«in.t. 

tp_ptrtUl_4tll»afy.*Y 

:p MlJ>t!cr> . 

{ 

accept (fd, <»:n»tt wiim •) KU.attr. (wxUm.t 'Wen); 
If |n«..fd > t) 

{ 

" i.i-**. comettwn fro*: WVu, wi »:a|tli i«i un.aott)); 

) 



default- 

-i-unino* event typt: i»\n', notlf->»n_li«io>r.vt.tYpe); 






in: <Hln( | 

iM fd, new.fd. re:, ;n, MfJlM*; 

Unci wctaddon mn, ;:i iKr, 
-Jrcvlnfo »ri; 

(Mr Suffer ;i«r, /■ :d read/wite data '/ 

r Op«n »oct«t. iwtt; t«wro_scr» um v 

if c|fd i s«»f:{«f.t»tT, aw.st»«, i»«DT0_seT»i> 

mcm*|; 

■ i); 

4wi.ttn.fMll. 

owi.iln.jort i htcm|}*M); /' Jaw available pert 7 

IW.II" «# 1 !«• - IVK* 

If (bllKj|f«. (tUVCt JOCkKMf *)«OW», UJMf(0»- 

ptf fpf ( ifcjaa* ); 



II <il«m<»d, l) < •) 

:ut*n»|: 
eXa«ll! 



/' SuturiM :o event 1 V 

>r iwf. :«oto.sctp. scrp.fMWS, leveri. \i««'[fv»*ni i*<i 

< 

perrorl.vrt'.oclop:-!. 
(•1)1 

) 

/• *K«tvf »9 ti» client v 
•newt (suffer. «is, mtef (tin' • 

t$ 'Kvnjs (nrn.fd, Suffer, Hceoflbuffer), 
(wclukJr'HcU.iMr. (MCklen.t -jilri, tsrl, «jk« «*p); 

< •) 

f 

perror'-sctp.recveaf-); 
c wilw ; 

) 
/* WWII* hki:i, if any V 

• 4d« < Kse.tonticAttwi 
< 

event (Buffer |; 
::r. - tape); 
) 

.'•■• on Mriar I 'IftM); 

/• Echo eac» received test v 
iM ■ Jlreof (ell *Mr); 

:»_w«aKj (npufa. I ■4M<Mr'|(etl.fd4r, 

:m. e, s. irl.iln'o.jtrean, 0. •); 

< •) 
< 

ptf ror ( . Ktp.i*ndasf> ) ; 
> 
tlM 

( 
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suffer); 



I 



r MtUM SWTtOMI ieWCAM. UK SO.'.IW" 
■ we«*t option (vu in «-:ko[>: ) to wod ASWTK 
V 

elo«(ne«_fdJ: 



or»-.f! linwit. «. »lr«if (event |.\ 

if (itu«rtcpt(wo jc, iwioto.sctp. $cn>.Mirrs. urent. unef(e* 

I 

perrorCtttsc- ■ 
retern 

J 

•rfa_»:ree« ■ i; /' send data en etreja ml'/ 



And here's the code for client. c: 



•lncliaj* <tt01o.li> 
•India)* <«,trlne.h» 
•include <« ■ 
•Include <•*! 

•Include <«y«Vtypei..h> 
•include <»y''t»:««; -If 
•include <n*ti 
•Include <Jf h'im: n> 
•include <»c:p.n> 

in: ealnu 

struct MKUMr jn serrjuMr; 
st'UCt wtp.ewnt. subscribe event: 
struct sctp.sndrcvlnfo sri; 

Mr sln_fe«Uy ■ «.[«!; 
HrY.lMr lln_p*rt ■ tr.ttiK (2SW); 
serv.addr.Hn.addr.i.ildr ■ inet_»*dr(-iJ?.».l.r); 

soM.fd i soc.et (Af.WET. SOCK_SfS£*>. IKWTO.SCIPI; 

( 

•arrgr(*saci 

Mi); 

) 

If (connect (SOcMd, (struct wcllOdr ') lw«.i» 
II « I) 

perrorCcorr 
eilt(l): 



.nConr*c:ed to [s.*|\o", lnei.rrtoa(t»rv.Jddr.sin.addO): 






j-irt iii» to bo torn to wfvtf v 

■HI |t>jf. 0, s«eof(t!uf)); 

strcpy(»ut, -Hello. SCTf «fW'"l; 

I' Send data to server •/ 

■ ■ 

;. vender (tock.fd. duF. ret. (uc«*ddr')(te'v.iHitr, len. I, 9, 
i:rw, ». »); 
If (ret < •) 



I 



Derror ( •Ktp.Mndur ! ; 

return (••-); 



) 
else 

•: 






I 



/• Receive «n»t server sends bacl V 

ret • sctp.recvnsa (uci.fd. tiuf. lUeef(buf), I, ti, isrl, u-,<) p»(i;. 
< •) 

< 

perrorCKtp.rKvuj"); 



i 



dose (socl.fd); 



'roe server on ttreaa Id: tV'' 



I 



I hope walking you through this simple client-server 
program give* you an idea about ihe virtues of SCTR 

Further reading 

■ Man pages: http://linux.die.nei/man/7/sctp 
• SCTP specific structure details: 
hup: //www. kernel-api.org EDf * V 



/■ tot sabterlolno fm my events, tot interested. •/ 



By: Srikanta Prasanna, 



"The author likes his beard and handmade khadt ctothes. In his 
leisure time, he works for Nokia Siemens Networks. Bangalore, 
You can reach him via h® Gmai ID srkantap. 
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An Auto Company Zips Along the 



Fast Lane with FOSS 



Carnation Auto, a multi-brand auto sales and service company, has grown 
phenomenally after opting for an open source enterprise platform. 



M sales a 

C_»-^ up by I 



y yO tarred in March 2009. Carnation 

\^_£S Auto — a multi-brand automobile 
: and services network set 
■ the former MD of Maruti 
Suzuki, Jagdish Khatiar— offers car owners 
a wide array of services covering servicing, 
mechanical repairs, body repairs, accessories, 
insurance, pre-owned cars, car customisation 
solutions, etc. From rectifying scratches and 
bumps, lo transforming off-the-assembly-line 
cars into one-of-a-kind a item ion -grabbers with 
accessories. Carnation has grown to 1 5 hubs 
across 10 cities, with more than 700 employees 
i in a matter of nine months. 



This accelerated growth wouldn't 
have been possible without open source 
technology. The firm adopted Red Hat 
Enterprise Linux Advanced Platform to run 
its business critical SAP ERP suite. The open 
source platform additionally helped it achieve 
integrated viriualis.il ion on the MP ProLiant 
BL460c G6 server. 

"When we started operations in 2009. we 
wanted to offer the customer a wide array of 
six to seven services, including mechanical 
servicing, body and paint work, CNG/LPG 
reiro fitments, customisation, accessories, 
financing and insurance. To ensure a 
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consistent and high -quality customer experience, we 
needed seamless automation but ai a low cost. An 
accelerated rollout and rapid scalability of our services 
was critical for early success. Thus, we chose Red ilat 
Enterprise Linux Advanced Platform," says Mohil 
Agarwal, chief information officer. Carnation Auto. 



Open source gear 

Implementing open source technology was not easy. The 
intensive li recycle management that Carnation wished to 
provide to its customers demanded a centralised IT system 
that would be a single window to address the various needs 
of multiple stakeholders (customers, business partners 
and employees). For this, the company chose the SAP 
business suite. 

The simplicity in managing the infrastructure, scalability 
and performance compatibility of the SAP business suite and 
HP ProLiant servers, coupled with low cost solutions, led to 
the decision to go for open source technology. 

"We considered a number of operating systems as the 
platform (or our business-critical SAP applications, and 
selected Red Hat Enterprise Linux Advanced Platform 
because it provided the best overall value, stability and 
performance," says Agarwal. 

On the fast track 

There has been no looking back since then. Open source 
technology helped Carnation reduce costs, improve the 
performance of the IT infrastructure and achieve scalability, 
thereby propelling the firm onto the fast track. 

Carnation Auto went live with SAP about four months 
back and has achieved a good performance from SAP's 
business suite atop Linux. Today, the firm has 15 live sites. 



with 400 users. So far, it has used only 10 per cent of its 
server capacity. 

"We are a distributed business. The final performance 
of SAP depends on multiple factors, of which one is the 
platform. With open source, we haven't had any performance 
issues despite I Ik? number of users increasing to 400 today. 
Not an hour of user productivity in terms of system downtime 
has been lost ever since we implemented the solution," 
testifies Agarwal, 

Response time is also critical to a system that is partly 
exposed to customers, as any performance delay would 
adversely affect the customers' confidence in the solution. 

"For our customers, the Carnation experience should 
never be dented. Linux allows the SAP business suite 
to aggregate information across domains, and it enables 
a customer-facing front-end that performs like a retail 
operation," adds Agarwal. 

SAP's commitment to Linux as a long-term strategic and 
supported platform for customers worldwide also assured 
Carnation a solution with nid-to-eiid support — from the 
hardware to t lie OS, and through lo the business applications. 

Further, Linux is highly scalable, which complements 
Carnation's growth plans, "We wish to open 100 hubs in the 
next three years and increase our user base on SAP to over 
3,000 users. We are confident of Linux having the ability lo 
help us achieve such scalability. Today, we can see ourselves 
grow ten times on the same platform without any issues, with 



We are looking at over 30 per cent cost savings from IT 
investments in Red Hat solutions over the next five years." 

-Moh.it Agarwal, chief information officer, Carnation Auto 
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Linux guiding our vision of transforming the automobile 
industry," says Agarwal, 

Low on cost 

Open source technology was also easy on the pocket 
for Carnation. A large portion of the cost savings resulted 
from the elimination of exaggerated software licensing 
fees. "Our estimates show that cost benefits are likely to 
exceed 50 per cent compared to proprietary platforms," 
said Agarwal. 

Further, Carnation hopes to achieve a lower total cost of 
ownership through open source because security is inherent 
in the platform (.mil not additional licensing baggage), 
aided by quick deployment that is crucial for a business 
where time is money, "We are looking at over 30 per cent 
cost savings from IT investments in Red Hat solutions over 
the next five years," says Agarwal. 

Many critics, however, might claim that maintenance 
costs of an open source platform might squash these 
dreams. But Carnation's experience of a customer facing an 
enterprise system on the Linux platform speaks otherwise. 

"By opting for Tata Consultancy Services (TCS) to 
provide end-to-end system integration services through 
a multi-year agreement for an enterprise IT solution, we 
ensured no hitches in the maintenance of our IT system. 
We have raised a couple of tickets but there have been no 
major hitches so far." says Agarwal. 



Additionally, RHEL Advanced Platform with integrated 
virtualisation enabled Carnation to quickly vtrtualise 
servers for testing and development, and try new features 
in-house before deploying them on customer-faring 
applications, "The open source platform allowed us hi 
increase the utilisation of servers without increasing the 
number of servers to be deployed. Red Hat came with the 
ability to move within virtual machines, on-ihe-fly. without 
any performance deterioration," says Agarwal. 

"The compatibility of SAP with Red Hat. and Red Hat 
with the HP servers, worked very well for us. It helped 
meet the increasing demands of the business, enhanced 
process efficiencies, and led to rapid growth." he adds. 

The road ahead! 

Looking ahead. Carnation hopes to deploy open source 
on its existing desktops. "We have about 20 desktops per 
hub. We are looking at an open source desktop platform in 
these hubs in about a year. We are looking at tremendous 
cost savings, and the easy management of front -end users' 
systems, which are like points of sale," quips Agarwal. 
It sure is life on the fast lane for Carnation! E2t" \ 

By: Vanisha Joseph 
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For U & Me Insight 




A Training Institution that's Going Places, 
while Breaking New Ground! 

By targeting students from distant shores, a training and certification institution 
has created a lucrative offshore travel-cum-training certification business that 
could be the forerunner of a BPO-scale industry! 



f(~^-f /**ision is perhaps our 
^*"^ g / greatest strength.. . ii 

f / makes us peer into the 

£S future and lends shape to 

the unknown." — Li Ka Shing. a businessman 
from I long Kong 

The siory behind how the founder of 
Kocnig Solutions came up with a radical 
business model, to turn a struggling training and 
certification institution into a profit churning 
multi-city entity, may interest many existing or 
wannabe entrepreneurs. 

In 2000, when the dotcom bust hit die IT 
industry, entrepreneurs running the IT training 
and certification businesses also fell the heat. 
The options were either to quit and save 
themselves from further losses; or to tie a knot 
at the end of the rope, hang in there, and look 



for opportunities in the middle of the crisis. 

Rohit Aggarwat, founder of Koenig 
Solutions, chose the second option and decided 
10 not only stand firm in the face of ihis 
onslaught bin also emerge ow of it stronger. 
Driven by his vision to make a success out of 
his hard-hit IT training certification business, 
he decided to explore new options and innovate 
around the existing set of resources. 

Supported by a team of dedicated 
professionals, including I he current general 
manager, Sandccp Dhawan, he decided to 
downsize and focus only on the profitable 
niches. On analysis, the team discovered that, 
occasionally, foreign students attended courses at 
Koenig. The company saw an opportunity lo make 
extra bucks by bundling travel ami Inspiialiiy with 
its core leai liing and u aiding often tigs. 
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The turning point 

This was an experiment tli.it worked well (or Koenig. The 
team bundled a hotel tariff in the course fee. and began 
making money on commissions from (lie hotel where the 
students would stay. "Although it was a miserly sum of Rs 200 
per day, it seemed like a princely sum to us in those days," 
recalls Aggarwal. The first student who opted for this course- 
pi us- hotel package came from the UK in 2002. "He was happy 
with our solution and agreed to become our referral in the 
UK. This encouraged us. Foreign students started coming in 
regularly, albeit in small numbers. Since these students saved 
a lot of money compared to training in their own country, they 
were quite happy." he adds. 

At that time the team felt that if the institution could get 
10 students every month, it would be a great achievement. 
This target was achieved in 2004. "Soon the true potential of 
offshore training started to dawn on us. We set a target of 100 
students per month, which we achieved in 2009. We are now 
targeting 1,000 per month, which is to be achieved in the next 
few years," shares Aggarwal. 

Blending tourism with training 

Initially, Koenig 's business idea was to save costs for its 
customers. Tourism was not a significant aspect of Its value 
proportion. But in 2004, based on the feedback received from 
its customers, who liked this unique blend of tourism and 
study, it decided to strengthen this aspect. 

Going forward, some students remarked that Delhi was 
not the ideal place to study because of its traffic, noise and 
summer heat. This prompted the team to open a centre in 
Shi mla. Then another centre came up in Goa. in 2005. 

Talking about the key factor that has helped shape 
the Koenig growth story. Aggarwal says: "The success of 
our business depends upon ensuring that our customers 
have a hassle-free stay in India. We have developed strong 
relationships with reliable and customer-oriented vendors and 
hotels in India, and most of our customers recommend India 
as a tourist destination to their friends and colleagues." 

Surmounting challenges 

But success didn't come easy to the team. Aggarwal 
recapitulates those days when, compared to western 
standards, the institution's infrastructure and facilities were 
ramshackle, with even computers being obsolete. But there 
were a few things that kept Koenig ticking. "The trainers 
and staff kept going with full motivation. The students liked 
the concept of the 'one-on-one' training that was imparted, 
and also the abundant attention that they received from the 
administrative staff." 

Over the years. Koenig improved its services. "The 
facilities and computers became state-of-the-art and 
comparable to the best in the world," says Aggarwal. 

A business model that may grow, dramatically! 

Offshore training is a novel business idea that Koenig has 
pioneered in India, claims Aggarwal. I le feels that the concept 



FOSS certifications: Trend- spotting 



Since Koenig Solutions has been h the business Of 
FOSS and Linux certifications and training for over 
15 years, we requested Aggarwal to snare a few details 
regarding the demand that exists in this domain, and the 
factors that are propelling the demand, 

Aggarwal observes that there is a growing demand 
for FOSS Skills. "Keeping this trend in view, we have 
progressively increased our training portfolio for FOSS and 
we plan to further enhance It in the coming year (e.g.. with 
Zend PHP certification).* RHCE remains the most sought- 
after certification in FOSS. LPI certification (which Is now 
supported by Novell) is atso gammg popularity, besides 
MySQL/PHP skills, which are also in demand, he adds. 

"We have been offering training on Red Hat Linux 
smce 2004. As of today, we also offer framing on Novell 
(SUSE) Linux, Solaris. Ubuntu. LAMP (Linux. Apache. 
MySQL. PHP) and LPI certifications. Our training and 
certification on Linux and open source technologies 
has been growing by SO per cent, year-on-year, and we 
expect i his trajectory to continue." 



lias the potential of evolving into a lull-Hedged industry. He 
explains: "We are diverting clients from other countries to 
India and, in the years to come, this will be another business 
on par with today's call centres. BPOs and other ITES (IT- 

I'll.illlfll SCI Mil's) " 

Aggarwal lakes pride in several other innovations that 
Koenig has come up with over lime. "The concept ol 'one- 
on-one' training and the holiday-t urn-training are the key 
innovations. Apart from this, we constantly upgrade our 
facilities and innovate in the MR processes (which are critical 
to retain the best IT talent) to meet international standards. In 
fact, as of today, our students prefer Koenig primarily because 
of quality. Cost is a secondary consideration." 

For budding entrepreneurs who wish to set up a training 
and certification business, Aggarwal has a few words of 
advice: "Focus on quality. Far too soon, service providers fall 
into the trap of seeking short -term profits, thus compromising 
on the quality of their core offerings. Though there is no 
dearth of training providers, there is a virtual vacuum for 
businesses that deliver superior quality that's beyond their 
price point. So businesses that are paranoid about quality will 
always do well." 

"A service provider determined to "wow' the customer and 
continuously innovate to meet the customers* latent needs 
cannot but be successful in the long run," he asserts. And, we 
agree! UH^'\ 

*■ x 

By: Vandana Sharma 



\._ 



The author is an assistant editor at the EFY Group. Apart from 
wnting on subjects like enirepreneurstiip. it for businesses, she 
loves to read on a range of topics, which include religion and 
spirituality. She tikes to read 'meaningful' fiction, too. 
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Microblogging Clients 



We brief you on the options— just take your pick. 



S """ rile" la 
K^Sg mien 



t s ..«! latest buzz in social networking is 
\ _<■* £ m i crob I oggi n g — the next genera t ion 

M of bloggi ng w here people share their 
C_>^ status, images, audio and video files 

with their friends without being verbose. When 
you microblog, you answer one simple question: 
"What's happening?" 

Some of us are already into microblogging, 
without quite realising that there is a term for 
the small text we enter in our IM clients and 
elsewhere to publish our status. And some of us 
are microblog addicts, already! 

Many full-Hedged social networking sites 



like i-'acebook, Orkui. Linked in, etc, provide 
ways to microblog, though they're all referred 
io by different names, such as 'Updates', 'Status 
Update', etc. There are also dedicated sites just for 
microblogging, like idem Lea. <w it ter.com, tumblr. 
com, present.ly, yammer.com and many more. 

Many of us are comfortable microblogging 
using the service provider's website, while others 
prefer desktop applications to satisfy their needs. 

Before we plunge into the different clients 
that exist for microblogging in GNU/Linux 
systems, let's understand some microblogging 
terminology, with respect to the services 
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provided by popular sites such as Twiner and idenii.ca: 

■ follow - Anyone can follow any user. Users who are 
being followed can control wf tether or not someone can 
follow them. 

■ tweet - To iweet is to post a small text message of 140 
characters or less in your account, which is usually related 
to what's happening in your life. Many companies and 
individuals also iweel id market or advertise products. Or 
simply share updates. 

• timel ine - This refers to a user's tweets, 

■ Re-tweet - This is all about spreading the word. Just as 
you forward an interesting email to your friends, you can 
rc-iweel someone else's iweet so that your followers also 
get the update. 

■ direct messages (DM) -This is like sending a private 
message to someone and only works if the person is 
following you. 

• U RL shortene r - U R Ls a re ge nera 1 1 y long. A n d si n ce 
tweets can't be longer than 140 characters, you don't want 
to waste character space by sharing a long URL. This is 
where URL shortening services like tinyurl.com, bit.ly, 
is.gd, etc, come handy. With their help you can convert a 
50-character URL to less than 10 characters. 

With all that jargon from twiner-land out of our way, let's 
start exploring the various clients available for tweeting from 
our desktops in a GNU/Linux system. Ranging from raw- 
APIs to impressive-looking GUI. there aie plem\ of clients 
available for tweeting. In fact, if you are a Python developer, it 
won't lake much time to roll out your own twitter client! 

Gwibber 

Developed using Python and GTK+. Gwibber targets 
GNOME users. The initial development was started by the 
Ubumu community, but over time, it's been available on 
most distros. It supports a number of services such as Twiner, 
Idenii.ca, l.aconica, FriendFeed, Facebook, Jaiku, Digg, 
Flickr, BrightKite. Qaiku and even has experimental support 
for OpeuCollaboratioii. Naturally, it supports multiple-account 
conliguration with these different services, simultaneously. 

The setting up of accounts is straightforward. The user 
interface looks similar loan e-mail client in some senses, 
where different accounts and the related items are grouped 
together. The menus are simple enough and self-explanatory. 
And the best part is that almost everything you want from a 
microblogging client is available. 

You can differentiate tweets from different microblogging 
services by assigning colours to each service, as you can 
see in Figure 1. Here, all tweets from Twiner have a light 
blue colour strip, and those from idenii.ca have a light green 
strip. This is very hnnd> when using multiple. recounts from 
different microblogging service providers. 

Just like your IM client, you can choose whetlier to minimise 
to tray or close Gwibber, on clicking the X. It also shows 
notification bubbles when new tweets arrive. Another good 
feature is the URI.shortener support, which is still experimental 
at the time of this writing. Some URI.shortener services you can 
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figure 1: Gwibber is the first choice for GNOME users 

choose from are digs, is.gd, tinyurl.com, tr.im and in 1 .ca. 

Re-tweeting and replying is a piece of cake. In (act, tweeting/ 
re-tweeting an update to multiple accounts is also possible. 
Besides, it gives you Tine grained control when choosing the lime 
interval (in minutes) for auto-refreshing the timelines — either by 
typing i lii 1 value or by sliding through the combo box. What else? 
The search interface helps you search for tweets. 

Finally, support for themes means you can choose from a 
range of available themes or write one on your own to fit your 
desktop's look and feel. 

Twitux 

Twitux is another GTK+ based Twiner client thai targets 
GNOME users. It has a very simple user interface that 
displays the timelines of those you follow. The best part is that 
it's very easy to use. 

There is a way to filter the timelines. Some of the different 
timeline views available are public, friends, my, twitux, direct 
messages, direct replies, etc. Apart from these generic timeline 
views, it also has a menu item called 'Friends' in which all the 
users whom you follow are listed, which provides a way to 
filter and view an individual's timeline. 

GNOME integration is quite decent — the GNOME notifier 
updates you on new tweets, and GNOME Keyring manages 
authentication credentials. Otlier features available in twitux are: 

• Expanding messages 

• Switching between showing the user name and real name 

• Retrieval intervals can be 
configured (3, 5, 15,30. 
60 minutes) 

■ The manual refresh of 
tweets 

• A spell checker for your 
tweets 

• Adding friends 

• Sending direct messages 

• Storing credentials and 
con n ect i ng a u to mat i ca I ly 

• Sou nd noli fi ca ti o ns when 
a message is received 
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Figure 2: Twitui has » basic Ul 
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On [lie downside, Twitux only supports one Twitter account 
at a lime. So. if you use multiple accounts and want a single 
client to manage them all, Twitux won't fit the bill. Besides, ft 
doesti't have support features like viewing a user's profile, re- 
tweeting, replying to messages and URL shortening. 



rjTwitter 

gTwitter is yet another CTK+ 
based client which is still under 
development and supports only 
Twiner. Its GUI is inspired 
by the Mac client twitterrific 
(see farpy/iojrtfacfory.cwV 
softwareAwitterriftc). It runs 
like a GNOME applet where 
once the application is closed, it 
minimises to the desktop panel. 

You can configure your 
Twitter account by right 
clicking the desktop panel 
icon and selecting the 
Preferences option. There are 




Figure 3: gTwitter only support j Twiner 



two views — a tweet view and <i list view. Figure 3 shows the 
list view. 

gTwitter allows you to watch lite timelines of both your 
friends and the public. It caches the user profile pictures locally 
and displays it alongside a friend's tweets. You can con figure the 
refresh interval between 1 and :it) minutes. Manual refresh is also 
possible. There is still a long way to go for gTwitter and only 
those who want a simple GUI to post on Twiner should try this. 

Qwil 

Guess all you Kill folks 

are gelling worried? Well, 

fear not, because there's 

a Qt4-based client called 

Qwil too. It supports Twittet, 

idenii.ca and some other 

custom microblogging 

services like Laconica. Its 

user interface is simple and 

self-explanatory. The Ul has 

tabs located on the left side 

of the app window vertically, 

in order to watch public/ 

friends' timelines. The search 

functionality is included 

there, In fact, you can customise the Ul according to your 

needs. If you are behind a proxy, then Qwit gives the required 

interface in order to configure your proxy settings too. 

It supports multiple account configurations. URL 
shortening is also integraied and you can choose from either 
trim or murl.kz. Qwit is specific on how connections are 
made lo the online services — thai is, hup:// or hups://. This is 
something I haven't even found in Gwifobei. 

One big disadvantage here is that you do not have control 



m mi- 



Figure 4: Owl's inn o« at me interlace 





... . . 



Figure 5: Choqok u f 1 for KDE4 uwrs 



over the time interval to refresh the timelines. You can either 
con figure ii to auto-refresh or not to refresh. Thankfully, 
there's a sync icon which you can use in case you are not 
satisfied with the time interval for automatic refresh. 

Choqok 

This one is the icing on 
ihecakeforKDEusers.lt 
currently supports Twitter, 
identi.ca and custom 
Laconica-based services. 

Unlike Qwil, Choqok is 
lightly integrated with KIM'. 
It uses K Wallet for storing 
user credentials and new iweet 
notifications are made using 
the Knotify (although, it has 
support for libnotify also). 

Choqok has almost all 
the features you'll expect, 
with a very pleasing and 
easy-to-use Ul. You can 
configure multiple accounts. 
and when you do, each account occupies a separate tab 
horizontally on top. There's a very cool feature in the list 
box that lists all your followers whom you can DM. 

Just like the Web interface, when we mouse over any 
tweet, small icons appear for deleting, adding to favourites or 
re-tweeting messages! Choqok supports URL shortening with 
services like is.gd, 2tu.us and digg.com. Of course, there's an 
option to search public timelines. 

Besides, it's even integraied with twiipic.com. which is 
Twitter's cousin for posting picture updates quickly. Another 
interesting feature is its integration with Amarok— hit Ctrl+L 
and tweet what you're currently listening to instantly, without 
keying in any character. Overall, it is fairly feature-rich, and a 
mature enough client for all KDE users. 

BTI 

All you command-line addicts must be wondering what's 
out there for you. Well, there's BTI, which is written in 
C. and supports identi.ca and Twitter. Unlike the two we 
discussed earlier, this one isn't a full-fledged application. 
What it does is "allow you to pipe your hash input to 
Twitter or idenii.ca in an easy and fast manner lo annoy the 
whole world." 

A sample run in the command line follows: 

ityltMflftrMJlr-S M 

till • v»nlw 023 

i:ylesi«iftMiijl:-S Kl -fK»t miner 

Enter Jnllt.tr «c*m:: testsen 

hM MttMr MMwrO: *ypu»mt) 

:«wi: this is i its', umt rrg» ■bu clltrs. 

MyltK<*Mn]i:-S Ml -nes: 

EnU' :«ltl«r «cewi".: l«t«*ri 
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Figure 6: Twillir.com scremshot shews the tweets Irani 8TI 
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Figure 7: Twilter.com scieenshm shows the iweeis from Twidge 



meet: TTiit it i test twee: Utm w. i client. 

As you can see in the snip net above, the password is 
not blanked out, which we generally expect from any oilier 
command line utility. I hope they fix it in future releases. 

BT1 also supports a configuration file. You can place a .bli file 
in your Iwme directory (~/.bti\, which looks like die following: 

• cmhIi «* illonef) In the btl (ontig Me 

KCMMetatttMMf 

pajjwrd-eypatswrd 

noit-ldmtttt 

« Emplr or a custM laconic* Iniiillltlon 

irast-mra .iiutf. :*i'. . • w ipi/ttatuiei 

logl>It:,bii.lof 

HMIm (Mi 

rusrr.gr tghn 

'i;tp://localhoit:MK 
(aMfaV-Wlwyli 

This saves you from typing your credentials every lime 
you want to use a service. 

It has many command line options for tweeting. For 
example, you can shorten a URI. using the — shrink-urls 

option. A shell script called bri-shrin/i-uWs takes care of the 
shortening business. 

MR! TMs it i tetl Iwt! to letl B* thsntmlnj r,!:p://*w». google. co«/ 

en;=lcew»sel-i 

Figure 6 shows the tweets from Twitter.com that we've 
posted using BT1. Anyway, there's not much you can do using 
BTI besides posting your updates. 

Twidge 

Twidgc is another command line client and supports idcnti.ca 
and Twitter. It can be used in an automated way to post to the 
services, and can also be interactive. Twidge is easy to use and 
it's highly customisable to fit your needs as well. 

It is mandatory to have the 'twidgerc' file in your home 
folder, in order to use this app. Twidge can create W, twidgerc' 
automatically when you run twidge setup by interactively- 
asking questions about your account: 

«y;«»n^jn]l:-5 tuidge setup 

Velcost to uldoe. He Hi'.', nam cantturt :«i3«e far your 

use. Tnti >i:i te «uick and r*sy> 



first, ulut is your usenaae' 

uternaae: *:wi 

wicow, t«tse»' Dan I'll nee* your password, 

NfaMnl, 

twin}* rut no, t*M contfurtd faf you. 

There are lots of configuration parameters that could go 
into the configuration file. All of these are available in the 
man pages or you can get I he manual from htip://so(twarc. 
complete.org/static/twidge/doc/twidge.pdf. A simple sample 
configuration file for Twidge is as follows: 

(waul 

pittvord: ay ;iis sword 
tiseritae: testsen 

A sample run to post on Twitter follows: 

ttylesenthwn] i : -$ twidge update -TM>. ■ ■ tweet from 

■slwldge client * 

*lyles«n*v»nji:-s twidge update "This Is a test for 

Wtl shortening rrom stwidge htlp:/ywww.gcKigle.co»/ 

searcn?styleientie=utf 8*oe=utr 8*aq=tlrls=0'g.dec>ian:en US: 

uno'l>cialtcl lent = lce*eosel a 

tlyleserwjvanji: -J 

Figure 7 shows the posted tweets from Twiner.com. 

It supports URL shortening with tinyurl.com. You can 
integrate it with your email system in order to send and 
receive updates in the form of emails. With the dmsend option, 
it is possible to send direct messages too. 

Postscript 

OF course, this article does not give an entire list of all 
desktop clients available for microblogging — my purpose was 
to just discuss some of those I've used. In fact, all you Pidgin 
users might not need a separate app for microblogging — the 
"micro-blog purple' plug-in can be good fun. Likewise, you 
can install the Echofon Firefox extension also, And well, 
it doesn't stop there. If you know Python, you can cook up 
your own client with the 'Python-Twitter' module. Happy 
microblogging! E2n*'T^ 

By: Senthil Kumaran S. 



The author is currently employed by ColabNet, working for its 
Version Control Group. He is a ful cxsrimirter of the Subversion 
project and is a tree software enthusiast. To know more, visit 
www.stySesen.org. 
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Introducing Calcurse. a text-based organiser 
that can work as your personal assistant. 




7ave you ever forgotten an 
important meeting? Or missed 
the latest episode of Lost? I'm 
sure it's happened to some ol you. 
Juggling tasks is difficult, so instead of trying 
to keep track of every important thing either 
in your head or on a piece of paper, why not 
give computer-based organisers a try? There 
arc many organiser applications available on 
the Linux plat farm, and they're called Personal 
Information Managers (P1M). People are mostly 
familiar with Korganizer and Sunbird as power- 
packed PI Ms. They are very good, no doubt, but 
are not the only good applications available in 
the open source world. 

Graphical tools, though intuitive, are often 
resource hungry. I am sure many of us would 
prefer solutions with much less resource 
requirements, yet with an easy and intuitive 
interface. This is where Calcurse comes into 
the picture. Calcurse is a text-based calendar 
and scheduling program wiih loads of 
features. The name Calcurse is derived from 
'calendar + ncurses'. You guessed right; it has 
an ncurses-based interface — which makes it 
very easy to use. 




What is Calcurse? 

By using Calcurse you can keep track of your 
daily tasks, appoint me ins and events. You can 
also set notifications to tasks, as and when 
required, and sort the tasks by priority. You 
can even lag the entries with notes. There is 
an option to change the colour scheme, change 
the layout and also change the key-bindings 
right from the application itself. You don't 
even need to edit the configuration files 
externally, manually. With many additional 
features like the import and export of the iCal 
format calendar (Google calendar uses this), 
auto-save, the ability to run in the background 
as a daemon, this organiser is one of the best I 
have ever come across. 

An overview 

Calcurse can operate in three modes. The first 
is the iHJn-itiler.n.li\f muile. where you have 
to pass arguments to the program and get the 
output on the terminal, The second interactive 
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mode has the interface in ncurses and you have 10 use your 
keyboard to run .1 menu-driven application. The thiid \\ lite 
background mode or the daemon mode. 

Non-interactive mode: In this mode, you have to pass 
arguments 10 the application From the shell and run it. This 
mode does not start the ncurses-hnscd user interface but only 
dumps the output to STDOUT (in this case, the shell). You'll 
find a list of all valid arguments along with their descriptions 
in the man page. 

Interactive mode: When you run Calcurse- without 
passing any arguments to it. you will see an interface 
as shown in Figure 1. This is the mode we are going to 
concentrate on in this article. You can go through the three 
sections (appointments, calendar and tasks) using TAB. 
(Remember, all the keys mentioned in the review are 
according to the default key-bindings. You can change them 
to match your needs.) The active section will have a border 
colour that's different from the other three sections. The 
section names are quite self-explanatory. The only thing I 
could not understand in this interface was the symbols to the 
left of the date in the appointments section. U turns out that 
they correspond to the phase of the moon on the current date. 

• ' |) ' - First quarter of the moon. 

■ '(I)'- Full moon. 

■ ' (| ' - Last quarter of the moon. 

• ' I ' - New moori. 

• * - (No sign) Phase does not correspond to one of the 
descriptions above. 

The notification bar at the bottom of the three sections 
displays the curTent date and time, followed by the file where 
the calendar database is stored ('apis* in Figure I, which 
is the default Tile), along with the time remaining for the 
start of the next appointment (not shown in Figure 1) in the 
following 24 hours. 

Finally, ri^ht .h the very bottom Is the status bar It 
displays the current key-bindings along with the actions lied 
to them. 

Background mode: In order for Calcurse to run in 
ku kgiouiul mode, the daemon mode option has 10 he 
enabled in the configuration files or via the interactive mode. 
When enabled, the daemon automatically kicks in when 
you close the interactive mode and, similarly, stops working 
when the interactive mode is started again. 

When in the background mode, Calcurse keeps a check 
on the upcoming appointments and executes the predefined 
notification command whenever necessary. You can check if 
Calcurse is running in the background by passing the -status 
argument to the application, which gives you the PID of the 
process if it is running. 

Using Calcurse 

Let's now look at how 10 use Calcurse in the interactive 
mode. As mentioned earlier, the status bar is quite self- 
explanatory; besides, you can always use ■?" to open help. 
You have to use Ctri*p and Ctrl*n for the previous and 
next page in Help. I will not go into more details here. 
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Figure 3: Ul layout options 

The documentation is very good and there shouldn't be 
any problem in using it. Now, we will go into the details 
regarding the configurations. Pressing c takes you to the 
configuration menu. 

The configuration menu has subcategories, namely the 
General Settings. Layout, Notify, Colour and Key-bindings. 
(Pressing ihe capitalised letter takes you 10 that particular 
sub-menu.) Under the general options, you can set the 
options regarding auto-save, the autu-save time interval, 
starting of the week, date formats, etc, 
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Figure 5: Detailed view of an appointment 

In order to set the notifications, go lo the Notify sub-menu. 
1 tere yon can choose whether to display the notification bar or 
not, and which information to display. The important setting 
here is the notify-barcommand and nottfy-barwaming. 
The notify-barjcommand is executed notify-bar_warning 
seconds before a flagged appointment. To flag an appointment, 
highlight the appointment and then press *.''. It will be marked 
as 'important' and the noti(y-bar_command will be executed 
before this appointment. 

Inside the Colour sub-menu, you can change the 
default colour scheme. The key-bindings sub-menu lists all 
possible keys and their functions, which can he changed 
according to your need. The Layout sub-menu allows you 
to choose between eight predefined layouts for arranging 
the three windows (appointments, calendar and tasks) 
inside the terminal. 



Import and export 

This feature is by far the best feature of this application. 
You can export your entire calendar in iCal or Peal 
formal. And this can then be imported to other organisers. 
The import function can he used to import iCal format 
calendars. Currently, the import function cannot import 
the not ificat ions set in the iCal format; it also cannot 
import the notes. This is a serious flaw, but it's in line for 
correction in the next update. 

Multiple calendars? 

It is possible to have multiple calendars using Co/corse. The 
default Calcurse rites are created in the home directory of the 
user inside the .calcurse directory. The files are: 

■ noii'v' This directory saves the notes created with the 
appointments and tasks. 

* conf- This hie contains the configuration settings of 
Calcurse. 

* keys - This file contains the key-bindings of Calcurse. 

* apts - This file contains the appointments. 

■ todo - Tills file contains the to-do (tasks) list. 

As you can see, the task and appointment files are 
different. By simply changing the appointments hie. we can 
have a different calendar entry, keeping the tasks constant. 
To change Calcurse to a new calendar, open Calcurse with an 
argument -c, that Is: 

ciIck'm c Pnhgrrm<»;e(!dtrDit»&»Krtt» 

And the events and appointments from this file will be 

available with you. 

The verdict 

Certainly Calcurse is not the best organiser in the world. The 
obvious glitches in the import function and lack of mouse 
support are serious problems. However, wiih its size being 
less than half a megabyte and the memory requirement 
also less than 16 MB, this is a gem for people with older 
li.mlw.ire. tZ3t"\ 



B y: Adit y a Shevade 



National Talent Scholar, Aditya Shevade, a final year electronics 
engineering student, takes keen interest in programming and 
electronic design, A Linux user for more than three years, he 
enjoys playing the keyboard and is a good photographer. To 
know more about him, visit www.adityashevade.com 
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CODECHEF 



The CodeChef.com Challenge— your monthly dose of coding puzzles from India's 

biggest coding contest, now in print! 



Icome back to the CodeChef 

/Puzzle Challenge, sponsored by 
LINUX For You and Directi. It's 
time to take a look at another one 
of CodeChel's interesting problems for March, 
and while you're at it, let's see if you can win 
some cash as well! 

Last month's puzzle 

The Fibonacci number series is a famous one 
where F[n) = F[n-1] + F[n-2], The first few 
numbers of this series are 0, 1 , 1 , 2, 3, 5, 8, 
and so on. Considering 1 -based indices, what 

i is the 999th Fibonacci number? [For example, 

I The 7th Fibonacci number is 8). 

| The solution 

Considering 1 based indices the 999th 
Fibonacci number is: 
16602747662452097049541800472897 
70183494805119838482806235855309 
1918573717701170201065510185595 
8986051 0409473691 8879Z784622330 
1 5981 02952299783631 1 23261 87605 
1 391990367653997999267314332397 
18860373345088375054249 

How did we do it? 

This number can be calculated 



by using big-integer libraries provided by some 
languages like Java, or by using a language like 
Python that supports large calculations natively. 
You can also write code for this in C/C + + by using 
arrays to store the numbers. 

And the winners for February are... 

■ Srinath Krishnan 

Balakrishnan Erode 
- Aaliya.Ash 

Puzzte for March 

Four distinct balls can be partitioned into three non- 
empty subsets in an unordered manner as follows, 
{(1hl2U3,4|} 
{(1,2),(3),(4|} 
{(11,(2,3), (4)} 
{(1.41, (2), (3|} 
{(1,31,(21,(41} 
{(2,41,()),(3|} 

We see that there are six ways of partitioning the 
four balls. In how many ways can we partition five 
such baits into three non-empty subsets? 

Would you like to get a little extra cash? 

Then solve this month's CodeChef Challenge puzzle 
and mail your answer to codechef@efyindia.com by 
March 18, 2010. Three lucky winners will win cash 
of Rs 1 .000 each! 




About CodeCnel: CodeChelcom is India's brsl noncommercial, antine programming competition featuring monthly contests in mote than 35 ddlerent 
programming languages CodeChet has been created by Directi, as a way la continuously challenge and engage the developer community, Ihe goal is to provide 
a platform tor practice, competffion and improvement as net as enable developers lo benchmark thdr sluBs against their peers Log on to mm axlecM cam tor 
next monthly challongo thai takes plaw liom March i-11. 2010. and win cash prUes worth Rs 55.000. 
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Getting Started with OpenLDAP 



Part 2 



Adding Basic 

Security 

Measures 




Let's get started on adding the initial level of security to OpenLDAP servers. 



j^-TTTthe last ankle, we had set tip a basic 
\^£/ OpenLDAP server and populated it 
J w i th d ata. We had a 1 so sea re lied t he 
\^,S directories anonymously and seen 
that we could not add entries (write data 10 the 
directory) anonymously. This is because of the 
default security policy in slajid.conf, the I, DAP 
daemon configuration file. In this article, we will 
take a look ai adding an initial level of security 
to OpenLDAP servers. 

The first and the foremost line of defence in 
any *nix operating system are the file and folder 
permissions. Vou must ensure that the server 
configuration /eic/openldop/slapd.con{ file has 
640 permissions and 'root:)dap' are the user and 
group owners, respectively, as shown below: 



[»»»»v6j -is U wc/opfKiiije/iiMM.cair 

M 1410 )>7« )n » II K <«-'<wil<lis iUM en' 



Besides, ideally, the open L DAP rooiDN 



password must be encrypted rather than remain 
in plain text. In the last article, we had specified 
a plain- text password for the rootDN, as is 
evident from the terminal output below: 

irootevsg -]• cat /f:f./op«r:<up".:i(xj cont - (rep roo'.pa 
'OOtjfc FOSTtRln^t . 
[rooUfiiSj -1« 

As a security measure, this should also be 
encrypted. To encrypt the root password, we use 
the slappasswd command: 

jrootBubg "I" tijp0*l«4 J FDSTninfitnui 
:sSK*)j<TES«Sli')!:J6:J?i!?5/WJ}i«ii.TtJU 
IrootSvtfl -!« 

As can be seen above. SSII A encryption is 
the default encryption mechanism. You can also 
change the encryption algorithm to crypt or md5, 
but SSI I A is the preferred scheme. 

We can now add this encrypted password 
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10 slapd.conf 10 further protect (he rooiDN password. Kdii 
/eic/openldap/slapd.conf and set the encrypted password as 

follows: 

[rootovbg -]' cat /atcopMlaap/tlajil.cwr I ftp rootp* 
rooipti (S&s»',»«!t«»isibi:«ir4,v 

;roo!i>.'l»J -]' 



the following command, for instance: 

[roolMj -)« » I -ll 'UVrwtpw 'JWASS'V 

.■»!c/0f»n:itJ9/tl4Pil tdtf 

[rosttvbg -|« hu4 ■« : 'Mc/ownrsap.'sjiiid con' 

[root|V»j -|" 



...and restart the I dap service: 

[rootffVtog *]■ /*tc/Wit-ft/iCii 
STocpir-i Opd: 

Starting jUpd: 
■rootiMsg -)• 



I * 1 



r * l 



i « i 



How would you lest whether (he new password is working 
or not? Do we have to always write something to the directory 
,nitl i liei k the password'.' 

An easier and risk-free approach to the above would be 
to search the directory using a user name and password. The 
syntax for providing the userDN and password in the klapsearvh 
command is similar to that of the Idapadd command: 



[rooi*>tf •)« w»lct Idip rwuri 
Slowing ilapt: 

ChrCHtno, wrl'i;urj!|-n. til« for 5iac<J: 

•foolOrti -]« 



I « 1 

bad COOhgur r 



So, we see that by randomly inserting lines, we are 
unable to set up the configuration file, slapd.conf. This can be 
achieved in some other configuration files though. 

Now, if we delete the first line and add the same line to the 
bottom of ihe file, let us see whai happens. Delete ihe first line: 

[rootfrto, -]> m4 -It '"..ID' /r:e/op«UdWii>04.c<yir 

Add the 'rootpw' to the bottom: 



irtgtalq-Mirk 1$ UtpttK'- ' :ll : b *&-kiuft.4c<org* 

t minded lOIf 
t t 

• • IMPV) 

• • »»» <*-»tuii,«t=o»a> witu st«r- 

Itr: (mjKKl! 

• > 'ic.u*stlng; Ml 

iraayaous SNrdi *■ • 



[roeltvti ■]» echo 'rootpn Uappaiwe t WTF> 
lUpO.cont 

This will add ihe encrypted root password lo the 
configuration file, as demonstrated by the command below: 

[rooltvtg -)« tall -n l /etc/opanldap/jUpil.conr 

tM> isanionHffcstiwMfajntjiw: 

IrooigV&o, -|« 



Now let us try searching with a user name and an incorrect 
password: 

•vtgdvta. M'i -)$ :mp-.jjrcn ■ •* 1«.1*8.LH : b -dcniuft.dcwg* 

"tip K4«ag*r, Dcaiuli.i: 

.a»f .blia Invalid ctdtntlals («») 

This fails, Therefore, we know thai the supplied 
credentials (user name/password) are incorrect. 

To run a successful search, we will need to specify Ihe 
correct password. That is lefl as an exercise for the reader. 

Making successful authentication a prerequisite for 
successful search (disable anonymous directory read) is another 
security measure that I would recommend. Though this depends 
on the kind of data maintained in your directory, if you are 
unsure. It is besi 10 disable anonymous read. Tliis is done 
through 'access control instructions' in the configuration file. 

But before we move on to 'access control restrictions', we 
first need to understand the structure of slapd.conf. 

Why did I simply tioi append a line to the top of the 
configuration file specifying the encrypted password, above? 
ll would have been very easy lo demonsirate by meniioning 



Now, let us restart ihe Idap service: 

[rooilVtt -]* w'vlct Idas raMrt 

Stowing 5 lata - 

'or Jlapd: bdb.db.opfn: naming to M.COHftG 
Ha found in 111 it>/!d»p: (:i 

: ^sor p*rfonunce fc dc=org. 

eenlif Mr ttv.lng luccttdM' 



Starting slapd. 
t>ooi#rtg -)• 



r * 



Obviously, we cannot insert 'rootpw' at ihe top of slapd. 
conf, but in the case of the default slapd.conf. we can do so 
at the bottom. 

Why is it so? This is because slapd.conf, follows a certain 
structure. So let us ask ourselves: what is ihe need for a 
structure? One reason thai I can think of is. backends. 

OpenLDAP backends 

Let's lake a detailed look at backends in ihe later part of 
ihis scries. It is the wide availability of backends that really 
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makes Open i. DAP such an exciting piece of software. 
OpenLDAP is very modular and can be thought of as 
having a fromend and a backend. The fromend basically 
is about the LDAP protocol, networking, etc, whereas the 
backend deals with the directory data storage. 

At this point, it is sufficient to know that we can actually 
store data in an SQL database (MySQL, MS-SQL) and access 
iIt.ii il.n.i through OpenLDAP using die 'sql' backend. 

We can also create a proxy LDAP server, actually getting 
LDAP data from other servers using the 'met a' backend. 

Normally, we use the Berkeley Data Base (bdb) backend 
with OpenLDAP servers, by default. The reasons and 
benefits for doing so can be explored in a subsequent article 
in this series. 

U is (his availability of backetuls ami the possibility of 
using various backends together in a single instance of the 
OpenLDAP server that necessitates a prescribed structure for 
slapd.conf. 

The default structure for sladp.confas described in the 
man page (man 5 slapd.conf) is: 

i :mm: imk options ipply to titty UtlUM 
<flotal conGouriit loo options 



option 
utiteu < rat una 1 typo 

•.-•- -..ir.iiw options spKInc 10 tKktn) t> 
'ton juration options tppcifcc to Mckend :> 
■'. objuration option spKlfce to M:kfna 1> 
• Mln*4u*At oV.ibiM o*!itltuo« I coofcgur u Ion options 

Global configuration options are defined at the top of 
slapd.conf. These options apply to all backends, unless 
explicit Is overridden within a backend definition. 

Databases are then defined by the keyword 'database'. 
Then database-specific options such as suffix, rootdn, rootpw, 
indexes, etc, are defined. 

As we can see now, since we have only one database 
backend, specifying rootpw at the bottom of the file worked, 
as the rootpw is a database corifiguralion option, but since it 
is not a global configuration option, specifying rootpw as the 
topmost line, failed. 

Since slapd.conf requires a structured configuration, a 
utility called slaptcst is included in the opcnldap-sen/crs 
package, slaptest reads the configuration file and checks 
whether it is okay or not. We use the -/'option to perform a 
sanity check on a configuration file: 



Note: slaptest is a very useful and important tool, 
especially in production environments, where configuration 
changes and updates must be thoroughly tested before 
applying them. 

Access control restrictions 

Since this article focuses more on securing the OpenLDAP 
server, we go back to our discussion on access control 
restrictions. ACLs (access controls) in slapd.conf in their most 
simple form can be described by the following syntax: 

(cent to (ttutl *V |M>o| [Itniljslonl 

As an example, the default access control restriction 
(when none is explicitly specified in the configuration file) is: 



By evaluating this syntax, it becomes: 
■ | What] => • (all parts of the directory) 

• | Who] -> * (all users - including anonymous) 

• | Pe rmi ssi on J = > read 

Thus the default access control restriction in slapd.conf. In 
plain English, means: "Allow all users to read all portions of 
the directory." 

Can we allow anonymous writes into the directory as 
well? Let us test this by changing the access control restriction 
to: "Allow all users to write to all parts of the directory." 

««« to ' Py ' trf UP 

Add this ACL to slapd.conf and restart the Idap service. 

Let us also create a new address book entry, by the en 
(common name) of "Ify user*, A copy of the sample LDIF 
used in the first article of this series is given below: 

rvWjPYto «ri -]S a: /np/'fyuwr ioif 

. ^»r,oo:»3ar«Sl»0».e;:*r 

', uwr 

Ml uwr 

* V. 010 Ctf Colony, SKtor-14 
ryppp 
peaulto:- 

hoaiPtim: P12* 3H)MJ 
mobile WS4S5M5S 
mi- lnfo4Kost«Urtaanu<.CM 
PkJtetCltPP: top 
oojiKtCUss: in*tOroP*rson 



irootpypg -)• : ltd conr 

POo.dP.optn: HVnlnp - fto OS C0fcTt& hit found var/UP/lmp: 

(21 

CiSKt poor ptrforatnet for 1:-;'q. 

confto. ' 

tfootpvto, -)• 



Let us now try to add this entry to the directory: 

[yppttegoork -\i Ipppppd -i -n 1P2.1M. 122.1 •' Zipp/lfy-ov 
•pding nru t j*lrissDool<.Br.;knin.»c=org,' 

Imp i*1: Stronj a: Ion rtouirrt (p) 

lOmaonpl Info: tePlfcjt loni rnjmrr i 
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Surprisingly, our ACL did not work. 
Despite the fact that we specified any/all 
users to write to the directory, we were 
unable 10 do so. To enable anonymous 
writes (not at ail recommended) to your 
directory, we will have 10 use another 
security directive — allow. 

To enable anonymous updates to 
directory, add the following global 
configuration option to slapdxonf: 

Save the configuration file, check 
for errors in the configuration file, 
restart the tdap service and test whether 
you can add a user anonymously. This 
should succeed. 

The allow updaie_anon option 
generally should not be enabled, as wc 
do not want anyone to write data Into 
our directory without authentication. 
It has some very special use cases I hat 
we might cover in the later part of (his 
series. 

Now, lei us apply a more common 
security requirement to our LDAP 
server — disable anonymous access 
altogether. In other words, valid 
authentication will be required even (or 
I he Idapsearch com ma ml. i low would 
we create that ACL? 



The above ACL does not give any 
[HTniksioN* hi anonymous usere. You 
can check whether the syntax of the 
ACL is correct or not, using ihe slaptesi 
command disc ussed earlier. 

But what are the possible 
permissions that can be specified 
in slapd.conf! We have already 
seen three of them: read, write 
and none. The others are: disclose, 
auth, compare and search. We will 
go into the details of each of these 
permissions later; we intuitively 
know the meaning of the other 
permissions — read, write and none. 

Similarly, what are the possible 
values for "who'? We have discussed 
two of these: * (all) and anonymous. 
Two other possible values are: users and 



self, users means entries or ONs that 
exist in the directory, and self means the 
user who is currently authenticated. 

There are many possible values for 
what". This depends on the directory 
data. In this article, we have only 
discussed * as a possible value for 
'whai". As we delve deeper into I.DAP 
and understand attributes, objectclasses 
and schema, we will be able to better 
define the 'what' part of an ACL. 

ACLs can also take more complex 
forms, including a 'control' option 
as per the security requirements of 
a directory. We will touch on these 
aspects once we create a central 
directory with users and passwords 
for authentication. For those of you 
who would like to experiment with 
ACLs right away and not wail for 
the upcoming articles, lite man page 
for slapd.access is a storehouse of 
information: 

[rM'.fvbf -|« ma tUpd.«ctt> 

This page contains a wealth of 
information on stapdxonf access 
control options and is a must read when 
securing an LDAP server. 

In the next article in this series, we 
will explore LDAP concepts such as 
schema, objectclasses and attributes, 
and build an LDAP server capable of 
authenticating Linux users. Do drop 
me a mail if you have any doubts or 
questions. The first article has elicited 
quite a few interesting responses — 
Irum question 10 requests foi certain 
advanced topics. I hope that we'll 
be able to cover most of them in the 
ongoing series. E3f"^ 

By: Varad Gupta 



Varad is an open source enthusiast 
who strong^ believes n the open 
source cotetxxative modeJ not only for 
technology but also for business. India's 
first RHCSS Ped Hat Certffied Security 
Specialist), he has been involved in 
spreading open source through Keen 
& Abie Computers Pvt Ltd. an open 
source systems integration company, 
and FQSTEFSng Linux, a FOSS training, 
education and research training centre. 
The author can be contacted at varad. 
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Part 9 



Guard 



Assigning Security Contexts 
to Subjects (Processes) 

Understanding how subjects (or processes) that have been 
created in memory get their SELinux security contexts. 



\^/f sen 



ii^ previous article (Part 8) in this 
\^// series covered type transition rules 
£ and explored how newly created 

C_>^ files are allotted security contexts. 

Files are stored in hard disks or permanent 
storage and, therefore, die security contexts are 
persistent across reboots. This article discusses 
security contexts for subjects (typically, 
processes) and how they are assigned. 

To view the list of processes on your 
system, along with their hierarchy, use the 
psiree command: 



(racttiAfl-iWt -]• Pttrt* 



•dhcUm: 
■{MtwrMtaasar) 



I 

[-!',« 

I audita- auntw • Mdlipatclt 

I I faudlxxll 

I \i.\V.:c\ 

I .iraM-dawon- • mill ww 

I -MmttD.activiii •••{boocto-Kllva!! 

| -ti««<-vtf -••!•; (tlmacwr)) 

I ci«» ajipltt 

I tonwlt- tit d*«--«r( (ontelt-tu -d») 1 



Cfom) 

7'jHpusdwon (atKrt ai mn )] 

. lunch] 

■*viit-pa>*' i!a 

. .ti-r[|tvi)IiT.lM)] 
evolu'.wnaUra- - (tvolutionalar) 
MlaUni-tflU- 2':(Hf9iutJon-fl*:«}| 
gcsof la satiln 

■QUaotrufy • JO"'*!"; 

. oHor-jnoM imlmvlbr! appla: 
blactoottiappla 
l-ajtaj-DMlliutlo 

»«sa»-cai»t- {»noa»- pa xtl} 



I 
updtsa 

I 






anoacvsluarcs 

9pk-upoat*-rcon- {gp* 

•Kaciti (» 
MtrllliH---{M 



The above output shows the process tree on 
my system (starting with the init process). The 
init process is the first one to be executed by the 
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kernel after the basic system has been set up. All processes are 
children of (lie init process. When the system is shut down, 
mil is the last process to terminate before the kernel executes 
its own shutdown. 

To view the security contexts allotted to all system 
processes, just execute the pstree command with the 7, option: 

[rootJrtg-»Ofi -]l r 

, '.IfW.rlwtaiortnantgtr.t:!*') 

inorkiuiugn . tM.r:«e!i»rMin»9«r_t:s*') 

l-rtrn *-s9:c«.cl«n') 

[acpit ip«d.t:»»') 

|-IU( «y»ti«.ii:s,«:M_r croed.t H lltt.tlCS'l 
( iuOi: ium'.d_t:tt') 

t | »udl«pd( lyllm.u iyv;e*_r:«a , tip_::t*') 

:»«_u:iyv.t«_r:M<lisp_::»«') 
3t:«»') 
I -raudltit' mj:mlit».tW) 

I »»i («»l Hlfl l>itw_r mtilj IT) 
I aviluHMMflt iy*:ta.u:syitM.r'.iviM.[:i9'} 
l-torooo-wtkvitlt v«<mfi«4_u:uiK««ft»«4_r:uiK0ntm*«_t:tf-tf:ea,el8J3') 
I {booobo-KUvit)! uncoflfu^jriifKO<ifffltO:imaflfiM<L!:*«-s*:c0.cia33') 
I -t i»wrwf ( fyttm.u: v>»if«.r : inUre.: :«•" ) 

t:H') 
:*ttrv*f)( ty»t«.ii-.ty*tt«.r lnt'.fc.ttt*') 
I ici»mvt" t:i»') 

|clKk»ppl»:( uw ••d.cimcOTfii>rt.t:M«t:c».eiKI'l 

I c!W'.i)l* ki; utl it : is i« rt c'.MJ) 

I I ■iconiole ■ . i u.«v»;e«.r:cwK>l«ki!_::v»-i»:c«.cl»23') 

:<■» r:ceniolrdt:.:'it-a:rt.c:Bl'| 
•iole-ktt-d»; :«*.r:csfiiolrktt.t:t« i»:o. 

. ->91>-Ut-**)l -e«.r:<o<HOltki!.::ie-iS:c8.c:tn'| 

i iiiim_» i>im_r mmilrilij i< i> \i iiwi'l 

| |-{eo»wl«k>: -it}: :wi_r:cotiK>ltkt:_I:i*»8:e*.Cj.*33 - ) 

I licwwlfkr.ti)! W«i_ii:iyitw_r:co«soltU[_::v»»6;c».c:»33') 

i , ;«Lr:cwjolHlJ_J:rt-s8:c8.c;823'l 

,a!*-klt «»){ v,-%:« u 5-|-%:«i r coiwtfki: ::<■} i»:c8.c:«J") 

i«I*kit.*ii . t*;c».cliM , | 

• j'.-tojl »yi!i«.u:iyjt«i.r:co«jolitl!.::>»il:c».t:»73 , | 

-■vole-kit-**} rM.rcMsoltku.'.iUrt-.cp.tlKJ'l 

I t-{wovjl«kltti) --».r;eo"«>lekl!.;:i».i9:ce.cl*»') 

I (•{to»Ml«-klt-*«} imj {Wtoltklt.t iiH:t 

Now, we can see the security contexts associated with 
all the processes. How did the init process get a type of 
init_t? Why are the sec urity contexts of some child processes 
different from those of the parent (else .ill processes in the 
system should have had the type mit_t)'! I low are these 
different security types assigned? 

Consider another scenario: The hitpd process (Apache 
Web server) on a Fcdora/RHEL server is started with the 
command service httpd start or /etc/inii. d/i uipd start. Start 
the Web server process, if it's not already running, with the 
following command: 



[lOO'.t>«4 aO'k -1' ' " *'•"•■ 

Check the seairity context associated with the httpcl process: 



unr.niiimj. 
unccnliMO. 
uitcwtiwfl. 



MNMfekM 



MCWiM 



«rk -)» ft 1x2 | g/« nnp« 

u:»yi:««.r:t)t:iKl.::»e 30» I Si 

.u : *r»te«_r : t>{ tpd_t : I« 11*2 T S 

u.ST«**-r:»ttpiLt:U> 3:13 » 5 

■ :n::po.t to ]]M » s 

u;tntn.r:htt(rt.t:l» 3i<S I % 

u:$ylt«»_r;litt&0_t:i» 3116 ' S 

u:jy«»«.r:Mt|)«.t:>» »»« * S 

u:jy»t««_r:hitpa_t:jo SIM 7 5 

.-•V.-1K3 3113 



t:**/»»f/iblaW!lpd 
*'.*• /««l/»bln/*:!pd 
I: at /uvr/ihln/n:ipd 
•:H /uif/tDin/Mipa 
«■»> /inr/tMn/Tt-.tpd 
6:99 /im'telfi/Titlrt 
«:*» /uir/ttln/Mtpa 
• :♦» /mf/tWfi/li:ipd 
e eo /uit.'ib: 



As you can see, the hitpd process gets a security context type 
of htipdj. Stop the Web server with the following command: 



[rooitV»8«»rl -]• ittirlu UMpd not 
| ht:W 



t « I 



Restart the Web server. But this time, not from the service 
start-up script, but by executing the binary command, which is 
as follows: 

[roo!»vfcj«Ofk -]» i 

...and now, check the SELinux security context for the Web 

server process: 



[rootOag-Mrk -)» pi 
uxortl«wiJ.u:inc»ilii!«d. I 



uncontnwd.u:ine<yiti>n(l.» 
mw lwi J ji.uxonfnBl.' 
uvootiwd.u.iKaAnM.r 

•jncortirw)_u:irt»ir.->nj f 

JXOntflfd.UI!AU)fll»!tl!.r 



to* I gr*t> llipd 

3:c«.cUt33 I»7 I Si 8:89 ItVlK 

MKmlrmA.l :i8-j8:t«.tl«23 3389 1 S §.-» /uV/lSl<Vhtlc«i 

:incOnhnfd_t:lO U:c3 .««3 3313 » S Ml /ujf/lM 

:incgnhwlj:$a-i*:c«.cll«3 3311 » S 9.M mf/iotumucd 

liKonlmdJ :i9v9:c9,cl»33 3333 » S 1:8* /u»r/i*lftrtitt»«" 

:incor<'nt<Lt:i0.s«:ca.cl«33 3313 1 S 8:9$ 

: .ixcn'nm ! v» vS::3.r ;!3J 3334 ? S i:99 

;uw»4iM4.t:s«-(«:c8.cU» 131S - S 3:00 

:\tKanlmt.t:t»f»:t».t\an 3316 » S 1:90 

,I:i»-$S:rtl.cl031 3311 ot< 1 5- (:H ; 



This time, the type of the Web server process is 
unconfinedj. Why is it so? If we use the service command. 
die same Web server process gets a security context type of 
hitpd _t. but executing the Web server directly gives the Web 
server process a security context type of unconfined_t. 

As you would have probably guessed by now, this is due 
to type transitioning. Like objects (files), type transitioning is 
also applied to subjects (processes). 

Tire basic rules to set the security context of services are 
die same as those for files: Whenever a new service (process) 
is created in the memory, type transition rules in the policy 
are checked. If a type transition rule exists and matches the 
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conditions, the resulting process is given the new security 
context. When there are no such rules, the new process 
inherits the security context of its parents. 

To check all type transitions rules that apply to processes 
(classes of type process), issue the following commands: 

[rootWuj-xifk -J* iei»»rch -7 -c proctti 
tyt»_r'*TUtlon uw.ninf.! fm»"v :c»ii «Oilt.l; 

'.union itiff.tiKM*.! r»s]ugii>_toitf$_*i»e_t : proctft mpl»9in_ay*^).i; 
it Ion intaod.t timrwunl.fwc.t : orocnt winij; 

■MtlOn WTj.t taHntWIt-ffl -¥OTt_t; 

typo.tmtltlon dwji.ibi! luwri oc*tt oount.t: 

-tuw imt.l itt.OMWntf.flK.t . proem iti.t. 

-rtltion riai.«o«»r. otu iilt'e.t. 

typ*.lrtlillltn nil. I j?>!.f .«_t : »«xm tnd.t: 
tr|».l't<nitlea oauLlcul.t qruil kmi 9Mll.qunt.t; 

typo.trvaiHM iuW.t>tcao*.t oso_«jnit.n«K_t : I'Kfii jjj »)«i! I; 



a) The parent process is the shell (because we are executing 
the script Mc/iniud/httpd under Bash). 

b) The type of the parent process is unconpnedji. (Execute 
the following command to check.) 

[rootfcrbO/terk -]» p« t>2 I jr*p 6»»fi 

M,: .,0'in.l C1023 2&i ; .t pti/l Ss 9:W CAiri 

C) The type of the file being executed is htipdjnitrc_exec^j 
(Execute the following command to check.) 

IrootMs wwk •!• 1* -U /♦tc/lnjt.e/rKtprj 

■ row root irtt«».>i:o»)«<: I l/MlpS 

Let us check In our policy if such a rule exists: 

•»<X!M5 .on -;• UtMKt -1 c t'cctn I ;its ■■ 



Based on the above rules, the syntax of type transition rules 
that apply to processes can be understood as: 

'.yp»-i'««lien intent »foc*n Type) [Typt o( I -tutu) 

to CfWM » procntl i proewt |1yp» of Tht Ww Proem crmed] 

To check the above rules, let us look at the example of the 
Web server process discussed earlier. 

When executing the executable /tisrAbin/lutpd directly to 
create the hitpd process: 

a) The parent process is the shell (because we are executing 
the command /usr/sbin/htipd under the Bash shell). 

b) The type of the parent process is unmnfinedj. (Execute 
the following command to check.) 

urKonfUH4_K:uK9nfi«4.r:jYOTfa««_r.st'!e:c9.cM2) 24M ptt/9 St t:M »trt 

c) The type of the file being executed is hiipd_excc_l. 
(Execute the following command lo check.) 

[focto.txj-Non -|i It -12 sut//tt>ln/Mtp4 

too: root tyi:».iret>}ec:_r:li:tDd.*iK_t:tt /utr/lW 

Lei us check in our policy if such a rule exists: 

(rooitVoa. «o« <«.* | o'*p Ml /♦» urw'Md.i 

['0Ot*v«5 «'• 

This shows that we do not have a type transition rule to 
set the security context of new processes created by executing 
files of type hupd_cxec_i under a parent process of type 
untxmfme(l_t. tn such a scenario, i.e., in the absence of any 
type transition rule, the new process lakes the type of the 
parent; therefore, the httpd process inherits its security context 
from Bash (which is uncon/iriet/j). 

Let us now analyse the other case. When starting the httpd 
service through initialisation scripts: 



Finally, we have found a match. This rule stales thai if 
,i iilc nf (\pc httpd. nuirt _c\ct j is c\e< uted under .1 pami 
process of type unconftnedj. the resulting process should get 
a type of iniircj. This is good, but we had observed that the 
Web server process had a type of httpdj and this rule states 
thai ihe type of ihe resulting process is initrrj. Is there an 
error? Is there something missing? 

There is. indeed, something missing. It is important to 
nuii- thai the Web setvei prot en b) 1 mated on em uttag the 
binary file (/uso/bin'httpd). Therefore, the inii script actually 
executes this hie. 

But what happens is that the shell script process created 
by executing the initialisation script {/etc/init.d/httpd) is now 
running with a process security context bearing the type 
inilixj (as per the rule above). When this process further 
executes the Web server binary {/usr/sbitVhttpd), a new 
context is created. Therefore, there is another scenario thai 
ttmies into |il.i> I mi-, whit h is: 

a) The parent process is the shell script process created by 
executing the script /etc/inh.d/httpii. 

b) Tf ve type of the parent process is iniircj (because this 
is the type of process created by executing the inii script 
from under Bash, as per the type transition rule above). 

C) The type of the file being executed is httpdjexecj (as ihe 
shell script further executes the binary /usr/sbin/tmpd). 
Execute die following command to check: 

;r03t*\OJ Mirk -]■ It IZ /gjr/tei 

■ . root root lylta.i>:oc)rci r:tr.:pd /•« :rss /i,-.r/iino/nt!M 

Let us see if we have a type transition rule in the policy for 
ihe above: 

[roo'.fvbg-ierk -]« uttarcn -T c procttt I ortp httpd.tnc.t | (ftp I 

:rsMjtlo» Inure. t riitpa_»««.t : promt nttpd.l; 
!roo:*vDg-«ork -]> 
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Voila! There it is, slating thai if a file of type httpdjrxecj 
is executed under a parent process of lype initrc_t, ilie resulting 
process created will have a security context type of litipd_t. 

As an exercise, let us ensure that the httpd process, if 
executed directly under the shell, should also be created with 
a security context type of httpd. To do this, we will need to 
create a new module and insert it into our policy. 

We will need 10 create a new lype enforcement file as 
discussed in earlier articles. An example of the file is given below: 



policy •c*il*(n:tp-Ky.i.:.o| 



« Ottitrttum 


r»qilr» ( 


type 1 


typt unc«Alln*«.t; 


lytw Mtf-Lmejt; 


to.t uncanlMd.r: 


itlao; 


} 



» 

typt.tf*>jitlo« wicanhiM.t Mtptf.ttte.l : P'ocrii •>;•»«•_•:; 

1fm nupd.t; 
alloa ua«wl<nrj t n::pd_: prKMJ :r*mi:i*»; 
|»6»«ybij-«r« (t>I<vrllnu<lS 



Hul tiiiu is the lype ni llu 1 litsi process (iiiil)sel? Dues il 
inherit its type from the kernel? What exactly happens? 

The following lines are taken verbatim From Dan Walsh's blog 
(/)tip://<fonwa/sft.(iwjourno'.com): "When the SE Linux kernel 
boots up. it is hard coded to run as kerne\_i. Since ai this point 
there is no policy running, this is the only context. So since diis is 
the only context, all applications that are run will stay in kernelj. 
When the kernel executes /sb'tn/inh it originally is running as 
kernel I. ilien n reads in the poHq hie and kadi n Into die tenet 
At this point in it re-execs itself. When /sbii t/inii was installed it is 
labelled mitjexctj and now llierc* is a rule in llu* kernel llt.il says 
when kernel j execs an application labelled initjexecj, it should 
transition to initj. So now the init process is running as initj." 

Lei us check il such a rule really exists in the policy, 
which applies when init re-executes itself: 

a) The parent process Is the kernel. 

b) The parent process lype is kernelj. 

c) The file being executed is Abi'n/Jntt. 

d) The security context type of the file being executed is 
initj?xec_f: 

froolpVDJ xl< -)> II -12 /SMfl/lAH 

iy»te«..li:i*J«:_f:lnii_HK_t:M* /Ibln/lmt 



r-i. root root 



Search the SELinux policy for a type transition rule: 

rootovbij «r< 

-slttoa ktrr- 

There we are! When /sbin/init is executed under kemel_t, 
the init process being created has a type of init_t. This can be 
diet ked by llu* following i omnia ncl: 



Compile and load this module: 

{vt#>«9 «ork tttt-<*Umo|t tufcr n;:».po 

{vtgfrotj-NWk tfs: wllmii)S su ■ 

[rootovooxxi -[• module -i ftow/v«a/test-»'.UHii/ > i::i».pp 

Now execute ihe camtnand /usr/sbin/hupd and nole the 
security context lype of the httpd process: 

[i - • •.-., ■.-•-.. n> ■,:■'.-.'■•:■.« 

[rartMl *?> ■:• 

|roottKer>-Wi -]» t» uZ I o*«r imp 

JKtrtrm r.mwt'nf. .:):!«! ilO 'h ».« 

mcrtftt.r.imurtntis-.mvit.l:* i»ro».cna JMS I s 9-.»» fmr/*U 

«o-r« »:<w,v-i rmttod t:k»-i*:o>).cltZi «•*! fiW /.;■ 

avorff« j:iitcon'.ird ':MIM l:^» «:c.l.c!BJ3 4347 ' S 0:60 /inr/lM.VMtpd 

«OT , ««_ii:*»ccfi'nM.-.-;!^ ; .« on cH*3 4141 » S W /inr/iwi/nilM 

ineorfn»0 _ u : aici>-.*nHl .r:l>tipif_c:«*-i*:cg cl»3 414S » S *'.•» Alt' fittA/ni lot) 

l l:%» v»:ifl c:«3 UM ? S 4:M 

incort , ft«.i>:uricon'nM.': , i1lp«.t:i«i»:co.cl«3 4JSI » S •:•» 

jnrT«<l_j.'u»co^'->rt 'Mt-x).t:»*iS:rS.clW3 US2 ? S S:N 'jir's: 
ir»w«r» • axon-wrd t:»t l*:c*.c]t?l 4i54 pt»/» »• ):»('»«l| 
;-vt.v. s «'• -;■ 



[rootfVboaorl -]■ jntree p? | h*ad -o 1 
[ root »Voj- work -]■ 

\»u we tan uiHlerslaiHl how subjects or processes created 

in memory gel I heir security < cms. '\ppl\ ing SKI inux polity 

rules under type enforcement is simply allowing access only to 
desired objects by die desiginned subjects, and once we know hovi 
to set the seoirily context types of objects and subjects, and how to 
create allow niles. we can easily achieve the best out of SELinux. 

In die next article in this series, we will explore macros 
and dive deep into thetn. Do let me know if you have any 
queries. Q33t"^ 

By: Varad Gupta 



varad is an open source enthusiast who strongly believes 
in the open source collaborative model not only for technology 
but also for business. India's first RHCSS (Red Hat Certified 
Security Specialist), he has been involved in spreading open 
source through Keen & Able Computers Pvt Ltd. an open 
source systems integration company, and FGSTERing Linux, 
a FOSS training, education and research training centre. The 
author can be contacted at vorad.guptaWostetmgiinuK.com 
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rri # rn * 1 

Tips Tricks 



Solve an X display issue in VLC 

4> Do you ever face problems opening VLC in Fedora 
(or for thai matter, in any other distro}? You might have 
often coine across errors like, "Cxiultl not connect to X 
server." or "Could not open display." VLC won't run as the 
root, A simple solution is to disable xServer access control. 
Type tlte following command to achieve this (you need to 
be the root user to execute ibis): 



Now you can go back to being a non-root user and run 
VLC player. 

— Puma ('handar, 
purnachandar. midi@onecamergence. com 

Using 'or' ingrep 

4> grep is a wonderful tool that helps you search for a 
particular word, or words, in files. So, how do we use the 
'or' operator In grep (lor example, if we want grep to look 
for either 'www' or 'server' when searching)? Issue the 
following command: 

.'*tc/i*ipe/««rtttiftf.eMf 

— Remin Raphael, reminJSQpgmailcom 



Inserting sudo insults for when a wrong 
4> password is entered 

Edit the /etc/sudaers file: 



Save the file. Now, whenever you type your sudo 
password wrong, sudo will insult you with a random 
phrase. Co ahead and check it out: it could be fun. 

— Rhuvunesh Kumar, bhirtibhwunesh Wymait.t rwn 



When to use xargs 

^) II .1 command is expecting arguments instead of 
standard input, then piping will fail (i.e., until | cmd2 may 
not work). In such cases, xargs will be helpful. It supplies 
standard input as arguments to a given command (the 
command itself is passed as an argument to xargs): 

ciej | nr^ ccj •<,'.'•• -f 

For example: 

»« <l««tlor> M» tvgt Qttf <wtrctfatt»T' 

...or: 

Iwfl <1«W1W> W i urjj n f 

— Rafesh Sola, rajesh@lisor.org 



Find out the time taken for a command's 
^ execution 

You can use the time command to find out the actual time 
ili.it elapses between the invocation and termination of a 
command, lite CPU time used by the command in user 
mode, and the CPU time used by the command in system 
mode. For example, here is the output of ps, limed by using 
the rime command: 



Add insults in the line that begins with "Defaults', 
which should look like what follows: 



>*M.U* 



' 



I a ■ i • 
ra to 

TI% fll/J H:M:M Ut» 
tm fft/2 M:M:M p 
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— Abhishek Tanwar, abhishek.ianwar@gmail.com 



A smart monitor for /proc 

■$ Sometimes, while working on a system with a heavy 
load, you need lo monitor the processing and working load 
(or memory load) to ensure the uninterrupted operation of 
the system. 

For this pur|xise, you need to monitor the /proc directory. 
Bui it's not so easy — you need to check every file to monitor 
their different status. Or you need to use commands like 
S/ree. Snice, etc. All this is very lime consuming. 

The command line tool Sprocinfo comes to the rescue 
here. With this, you can easily monitor and get different 
status reports of the system, such as: 
t. 
2. 
3. 

4 

5. 
6. 

7. 
8. 

•). 



Physical memory information 

Boot-up timing 

Average number of running jobs 

Amount of time spent running jobs in each user space 

Time spent running jobs in kernel space 

Time spent running jobs in each user niced space 

Swap- in and Swap-out status 

Idle lime 

Number of times your liaid disk is accessed 

10. All available lilesy stems 

11. Interrupt status 

12. Character and block devices 

Try Sprocinfo -o to know the status of all the above 
parameters and see the results. 



Setting up an email alert when the root 
^ filesystem is almost full 

When the root filesystem of your GNU/1, inux systems 
is full, your system might stop working without any 
in Hi hi at ion. So how will one know this might be the cause 
for the shutdown? Don't worry, there is a simple solution. 
The following command will show the amount of disk 
space used on the root partition: 



■ «r / i rn i I 



'( print m ' 



Via vim < an ( reate a ■< ript, v> hich can be added to enmtab 
,nul it will email you whenever the disk's free space drops to less 
than die critical amount, say 10 per cent. 1 lere is a sample script: 



CWttMi$[«f / | O/ff I 
TM«ES<ttP-9t 



'! p«u>: BV I vA 'j/v/f 



ir ( *ioj*»r -j! •iTHtfcSHW.B- ] 



Mil 4 -01M S?K« pJtft* MllttaulnuaF.coa « m 

Your root piratic 'WJinti^ jpjc« It critically low. Ut*»: 

■ Ml 
10* 

I 

Now save this into a samplc.sh file in your home 
directory and add the following line at the end of the /etc 
crontab file: 



— Ami I N. Bhakay, amit.nb@gmait.com emiiy -/j*pi«.»h 



Password-less log-ins 

<£ If you want lo log in to any user account or even as 
the root, without entering a password, then follow these 
steps. Open the /etc/pa sswrf file in your text editor and go to 
the following line: 

root :»:»:•: root : Iter, :/*l/i/bwi 



That's it! Now whenever your root filesystem grows 

to beyond 90 per cent of the total partition size, you gel a 
notification. So you can take the required steps to free up 
space before you reach the deadlock. 

— Mattikarjun, maltik.v.arjun@gmail.com 



Delete the second held (that is 'x') and save this file. 
You can also do this for other users as: 

vll->:5M:SM:Mt:/!»wftii:/bin'iMil! 

Now reboot the system and try logging in without the 
user password. 

— VWfds/i Kumar Jha. v4evervikash@gmail.cam 



S hare Your Linux Recip es! 



The joy of using Linux is in finding ways to get around 
problems— take them head on, defeat (hem! We invite you 
to share your tips and tncks with us for publication in LFY 
so that they can reach a wider audience. Your tips could be 
related to administration, programming, troubleshooting or 
genera) tweaking. Submit them at www.fiiuxforu.com. The 
sender of eacn published tip will get an UY T-shirt. 
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Sandya Marmarswamy 



Welcome back to CodeSport'. In this month's column, we discuss mechanisms for design patterns 
that can help simplify object-oriented programming and facilitate software reuse. 




TSny readers had sent their answers lo the 
questions we featured in the January edition. 
Congratulations to our readers K. Madhu and 
Joseph Raj for their correct solutions 10 ail the 
questions. 

I have received requests from a few readers to discuss 
software reuse and design patterns, so over the next few 
months, we will focus on these topics. Presently, we will 
look at how design patterns can help software reuse. 
We assume that the reader is familiar with basic object- 
oriented programming concepts. 

Software reuse 

1 lie import, mte ol software reuse has been vvidelv 
understood and is a major advantage of object-oriented 
programming. Tliere are two possible ways of reusing 
functionality in object-oriented programming One is through 
class inheritance and the other is through object composition. 

Reuse by class inheritance 

Using class inheritance, we can define the implementation 
of one class in terms of another. Consider the often quoted 
example of a class hierarchy that defines a base class called 
'Employee' and a derived class 'Manager', which is derived 
from this base class. By deriving the 'Manager' class 
from the 'Employee' class, we do not have to rewrite the 
employee f una tonality needed in the Manager class, since 
,i Manager is also an Rmployee. Only newer functionality 
pertaining to the management f una ion of the Manager class 
needs to be defined and implemented. This form of reuse is 
known as 'White box reuse', since typically, when reused 
through class inheritance, the internals of the base class are 
visible/exposed to the derived classes. 

While reuse by class inheritance is easy, it has some 
disadvantages as well. Since class inheritance is defined 
at compile lime, the implementations inherited from the 
base classes can not be changed dynamically at runtime. 
The second major disadvantage is that sub-classing often 
results In exposing the base class implementation to the 
derived class. In many real-life cases, the implementation 
of a derived class is so closely tied up with the 
implementation details of the base class, that any change 
in the base class vv ill impact the derived class as well. 

Consider die following class representation where we 
have the Employee class which represents an employee, 



and a Manager class that inherits from it. Let us assume 
that the dates are represented as dd-mm-yyyy in the 
Employee class, and we have a method in the Employee 
i lass. ii.imcK PrintDaiet X billing, wh'n h prints ihe dale ul 
joining in DD-MM-YY format. Now what if the Manager 
class was designed so that it has a Print method that prints 
the Manager details as given in the code snippet below: 



( 



) 



: anaif.) 

CrinircMployt* id: M nan: v \n", iMs-»id, ■.Ms-xiat) 
pruitf CMC* of joining (««yy| l«:\n|; 
tMl<>»rln!ta!tofJolMng|]; 



In this snippet, the Print method in the derived 
Manager class calls (he Print DateOf Joining method. If 
this method was redesigned to print the date as DD-MM- 
YYYY format, the Print method needs to change the 
printing of the title message as: 

v.-i'i HMaati ttut : 
( 

prlnLfr'JflJO*' 10: VI w: tV, Ul!l->14, : hit- mum J 
fftalf (•(«« of joining (tt-n-nvy) ■> rt *lJ 
tldl-off intttttof Joining [ ) ; 

) 

This is a bad design since the base class 
implementation of printing dates as DD-MM-YY was 
exposed to the derived class. This dependence meant 
that the derived class needed to change when there was 
a change in the base class implementation of printing 
the date of joining. The problem occurred because the 
base class implementation was inherited assuming a 
certain underlying representation. When the underlying 
representation in the base class changed, that required 
.i tot responding change in the derived ilass, which is 
undesirable. A simple code change could have avoided 
tlic dependent") as shown below: 

void mmi*r 
f 

prmtfCmniMf Id: VI now: « <*', tnit->l«, :M«->mm| 

pflnlf Cool* of joining (\] U \n\ 
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•=rtn!0ltiOt)OlnlfH(|; 

) 

fly removing the assumption about die base t lass 
im pic men mi in 11 and invoking the base class method flint 
advertises its date format, we have been able to avoid the 
change to the derived class implementation when the base 
class implementation changes. 

Reuse by object composition 

Reusing functionality by object composition is another form 
of enabling reuse. Various objects thai offer the required 
functionality are composed together into a composite objeci. 
by including references to those objects. The functionality of 
(he objects being included in the composite objeci geis reused 
through well-defined interfaces provided by these objects. 
The composite object is insulated from the implementation 
internals of the objects it is composed of. Hence, ihis form of 
reuse is known as 'Black box reuse'. 

Lei's assume that you are designing a holiday vacation 
package. You already have designed the classes 'Hole! Room'. 
'Car' and ' Passenger'. You can reuse these classes to create 
ilu' 'Vacation Trip' class, which includes objeci references for 
hotel rooms, cars and passengers. For example, if ihe 'Vacation 
Trip' class includes a method tailed MakeReservaiion'. it will 
reuse the functionality from die composed objects by invoking 
ihe interfaces 'Car::Reserve' and 'Hole I Room:: Reserve'. 

Since the methods are invoked using object references, the 
object encapsulation of the composing objects is not broken. Also, 
it is possible 10 cliange the objeci conijxsition at runtime as long 
as the new object lias the same type as the object it is replacing. 
However, objeci composition requires thai well-defined interfaces 
are needed in the objects that are used for composition. 

Design patterns— preliminaries 

You may be wondering why we arc discussing software reuse 
so much in an article on design patterns. Increasing software 
reuse was one of ihe motivational factors in the birth of design 
patterns. Software applications are complex applications 
running from thousands to millions of lines of code, involving 
interaction between a large number of objet is. However, a 
study of large real-world software applications has shown thai 
there is a great degree of com mora lily in some of the sub- 
problems that are part of a complex project. 

Often, each software project requires visiting some data 
structure, say a graph or linked list, and performing a specific 
operation on each member. For instance, a simple find on a linked 
list maps 10 a visitor pattern, which performs an equality check on 
each member. Similarly, doing a depth first numbering on a graph 
requires visiting a graph in a particular order and performing 
numbering on each node as it is encountered during the traversal. 

Design patients allow us lo identify frequently encountered 
problems during application development and to specify a 
solution template that can be applied to a variety of situations. 
While ihe software reuse we have been discussing so far has 



been with respect to software functionality, a greater and more 
fundamental question is whether design reuse is possible. 

If there is a frequently encountered problem in software 
programming, can the design of ihe solution be templaiised 
,ts a pattern so ih.il it . an he appiied undei diflerenl contexts? 
Design patterns try to extract the common design structure 
that can then be reused under various contexts by different 
concrete implementations. 

Now you may ask — how is a design pa item different from 
a standard template library algorithm? An algorithm in the STL 
library provides an implementation of a particular algorithm. 
defined in terms of parameierised types so that i( can be used 
with different types, it is a concrete implementation of a 
solution. On the other hand, a design pattern only provides a 
template of a design that can be used under different situations. 

Let's consider a situation in which you have to implement 
a compiler. There can be only one instance of a global 
symbol table and all modules should be able to access it, 
while no one can be allowed to create multiple instances 
of it. Similarly, if you are writing an operating system, you 
need to ensure that only one instance of the file system or 
scheduler is instantiated even if there are multiple threads 
running. Hence, the problem of ensuring that a particular 
class has only one instance and has global access, comes up 
multiple times in a software development environment. So, 
if we can find an abstract solution for this problem which can 
be applied under different con lex is. then we have a design 
pattern. This is known as the Singleton design pattern, which 
we will discuss in detail next month. 

Ihis month's takeaway tjiiesiion continues our discussion 
of the Singleion design pattern. Can you come up with a C+ + 
implementation for a Singleion design pattern? Please do not 
look up the solution from the Internet. Our intention is just 
not to know the answer, but to become effective in designing 
solutions. Instead, try 10 come up with your design for the 
Singleton design pattern. While a naive approach would be to 
have a global or static object of a class as a singleton, there are 
a number of problems associated with such a simple approach. 
I leave it 10 the reader to ponder over possible issues and come 
up with a robust design. Also, you need to ensure that your 
design works in a multi-threaded environment. 

Please do send me your solutions. Also, if you are 
preparing for computer science programming interviews, 
you may find it useful to visit my programming interviews 
discussion group 'Computer Science interview Training 
(India)' on Linked In. If you have any favourite programming 
puzzles that you would like to discuss on this forum, please 
send them to me along with your solutions and feedback at 
sandyasm_AT_yahoo_nOT_com. Till we meet again nexi 
month, happy programming!G2ff ' V 

/• N 

About the author: 
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Understanding Pointer 
Arithmetic, Part 1 

Pointers are most difficult to master in C. In this article, we'll cover the basics of pointer 
arithmetic and look at how it is different from what we've learned in high school. 



What are pointers? There are many different 
answers to this question. Simply stated, a pointer 
is an address! A longer answer would be that a 
pointer is an abstraction of the concept o[ the 'address of a 
memory location'. Yes, it's an unusual description, and I'll 
explain its meaning in this article. 

It's quite tedious to directly write machine code (in 
ones and zeros). Assembly code helps us write machine 
code almost directly, since it lias mnemonics for machine 
instructions. An assembler is (conceptually) a simple 
program that translates these human -read able mnemonics 
to machine opcodes. C is close to machine (and assembly) 
code, and well look at C data types as an example for that. 

At the lowest level, information Is stored and 
manipulated as bytes, words, double-words, etc. In C, bytes 
are chars (there is no byte type in C; the closest is unsigned 
or signed char); words are ints (integers); and double words 
are longs (long integers). In a floating point unit, data can 
be in single-, double- or extended-precision. In C, it is float, 
double and long double types. Apart from this, we can lake 
addresses of memory locations — that address type is treated 
as a pointer in C! 

Since pointers are an abstraction of addresses, the 
arithmetic on pointers is different from usual arithmetic. For 
example, in assembly coding, to assess a value in location 
idx in an array named arr, you add an index to the base 
address, and then read the value from that location. In C, 
the base address is the name of the array (arr); index is an 
integral value (idx) and accessing that index is given by 
the expression arr + idx. Now, to access the data in that 
location, we use the indirection operator (read operation). In 
other words, it is "int val = *(arr + idx);", which is logically 
the same in C as well as in assembly language. 

Now assume that arr is of int type of size 4 bytes, and 
index is 10 for an imaginary base address, where arr n 
OxAAAAOOOO. If we access 10 bytes from the base address. 
it will be OxAAAAOQOA. which will be wrong. What we 



need to access is arr * sizeo[(word) * JO. Hence, arr + 40. 
which is 0xAAAA0028. If the underlyiugarray is dword 
(long int), and we want to access the 10 location, the same 
expression arr + idx will be orr + siieof(dword) * W. which 
is OxAAAAOOSO. In other words, depending on the type of 
the array arr, the + operator behaves differently. If it were a 
char array (as in strings), the Index operation for arr + idx 
would have added exactly 10 to the base address, which is 
OxAAAAOOOA. 

This is precisely how pointer arithmetic works in O We 
need to assume that pointers point to somewhere in an array 
(even if such an array doesn't exist in our program). Adding 
a constant to that pointer is as If we are doing an array index. 
and the result depends on the type of the (logical) underlying 
array. When we don't know what type of the (logical) array 
we are pointing to. we call it a void *. As you can understand 
now, we cannot do arithmetic on a void * since the compiler 
will not know the underlying type. 

In assembly language, we can store an address in a place. 
I.elS sup|K)se thai i want to remember the base address tin 
in a memory location addrvar. Now, if I need to access the 
value in arr through addrvar (whose value will be the same 
as "'arr or arrfO} in the equivalent C expression), we need 
to first get the value stored in addrvar and then get the value 
stored inside that value. This is nothing but double de- 
reference, and addrvar is nothing but a pointer to a pointer! 
Now we can understand how pointers-to-pointers work, and 
how an array of pointers-to-pointers (oh man!) will work. 

In other words, once you understand how the underlying 
machine treats addresses, you can easily understand how 
pointers and pointer arithmetic work in C. ES)f " ^ 

About the author 
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Segment: 4.2, Day 21 



_ 



Part 22 



-- 



j»-r7*H the previous article, we'd looked ai how 
K^y to add more features to a module. But you 
M co u Id n "t ea 1 1 what we 'd c rea led a 'device 
C_^^ driver'. In this article, we will devote our 

time lo developing a driver for a simple 'device'. As we 
discussed before, Linux treats devices as files. You may 
scan through your /dev/ directory to see the listing, it is 
through the addition of a file node in this directory thai 
we make a physical device accessible. 

You may notice thai many files are listed in this 
directory. This does not mean that all these files 
(devices) are active. Issue the following command to 
see the active ones: 



C*t /pr«/»t¥lCM 

We have also seen that there are character and 
blot k devices. (We looked .il network devices as well.) 
The type of the device informs us about the way in 
which data wilt be wriiteti to the corresponding device. 
In the case of a character device, it is added serially 
(byte by byte) and for a block device, the data is added 
as large segments (an ideal example will be HDD). 

Now I am going to list the active devices in 
my system: 

uatwintyituueex: •% ci: /proc/dtvlcrt 
Cmrtetf *«!£♦»: 
1 «a 

4 tly 

4 ttyS 

s MMHy 

5 /Otv/eoflsolt 

S /«V/p!I» 

tip 

it mk 

1? :-;■•■ 
14 

r. s^ 

31 fb 



H .; m Ull ■ 

N rxv. 

m m 

U» 4J»» 

M p:« 
i» pa 

180 u*.t> 

19* bSB.HtvKe 

«<autmt rimateb>» 

1 1 ere 1 can sec some names and a numerical value. 
The numeral is actually (lie major number associated 
with ihe device driver. (We will discuss major and minor 
numbers after writing tlie code for the new driver.) 

Having got this information, I can now allocate a 
major number that has not been assigned previously. 
All I need to note is that the new number should not be 
on this list. 

Now let me show you the complete code for the 
new driver: 

«lneh*"LFY_dtvic«_h«id»r . i* 

• lncU«e<Uiiu>/»odtiit.h> 

• UvduGKllnv 

•OOULf AUtWet '«<!( Vlniyak tv): 

W3CULE teM«PTI«<*witt(n for Vg y «»« 10 (trueS'l; 

»u:tc In'. tFK.S»yJet.limtvoW): 
static nit im.«nlc«.clHniw(w)d), 



.iMUiry.atvice.lni!]: 
>_«lttL« J*vlt€_cl«»*«) ; 



sialic M lFYjJ«vlef_lntt(YOl«) 

I 

tf t r<9iiur.cnr«v{ iti, "in jj«ic«',iiFTU>»*) 1 

( 

ptiniM"<»>nu»d :o raatmr); 
) 

return 9; 
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j 

static void lM.d*vut.clHniip(wid| 
I 

unrejisier_cdrdeY(l6l,"Lnr_i»evi.e«'); 
return ; 

) 



As you can see, the above module code contains an include 
statement for [he file LFY_dcvice_lie.xlcr.ri. This is a custom 
header file for our driver. Let me show you that Tile as wel I: 



Now, let's analyse the code. One of the important files 
tlwt the code is referring to is the linux/fs.h file. The file_ 
operations structure is described in this file. And if you look 
at this file carefully, you can see that it contains the necessary 
pointers to functions that we used in our driver. In the case of 
an actual device, this will help you in performing the basic 
operations on your device. I lere, each field is linked to the 
address of a function that we used in the driver. The basic 
operations, like reading, writing, etc. are handled using ihese. 

For your reference, here is the struct file_operations code: 



• IfftOtf .LPr.KVlH.K 

•mm* .Lfv.OEWtt.H 
•include «U(iui/ri.n> 

•include <tnuK/sched.n> 
•include <llnm/*rrno.d> 

«mciu> oaftamatJ* 

•include <ita/itgMn'..i» 

• include (lu'Mcnu.u 

char lFT.deVtc(.d*l*|tg]:*SMple Ml * voyije to Kernel'; 
in: ls» aevlce.openf struct mode "Incoe. struct • 

device. reiMM{struct mode 'Mode, struct tile 'dip); 
Hlie.t Lfr.device.rtidlstracl lite 'Mo,c"uir 'buffet . siit.t count, lofr.t 'otfp ); 
MfMLt icr_devic*.iiri:e| struct U» 'dlp.const cdjr 'Oktfer.sue.t 
count, loff.t 'offp ): 

struct file.eperitlens ir».opt:< 
Open: iPr.Otvlce.open, 
read: ifY.oevice.reao", 

■■ d*vK» ksriM, 
r«lHie:iPv,*vt«.f »!«$», 

}; 

int lFr_o>vice_ope«( struct inode 'lnoo>. struct I 

I 

return 8; 

1 

in: lct .device. ral«*sets:ruc: irwoe ■ mode, struct die 'dip) 

I 

rer-urn 9; 

j 

.ff.eevice.rtddtstruct Me 'dlo.crar 'ouffet, sue_t cant, loff.t 'offp ) 

{ 

If |ccw.to.uMf(btiffer, tFl(_d*vlc»_d*U,«rtenlin .device date)) •-- « ) 

prmtM "Wer- space • COJO* folledW ); 
return strlenjLFv.devlte.iUti]; 

) 

• IFY dr-vicr rfltr •vtrilft li> 'Vp.coflJI cdar "Oiiffrr.siie.t 
count, lot f.t 'orfp ) 

{ 

if | copy.. ftoej.uwrllFY.devlce .sata, duffer, count I M » ) 
prjn:k[ -copy fdlledin' I; 
return (; 

) 

mutt 



Struct Me. operations ( 

struct nodule 'Mner; 

NffJ I'UMfcl (struct Ht •. loff.t. lnt|; 

ssire.t (*r*ed) (struct tile ', char _user '. slie.t. lotf.t •); 

["■ttrittl (struct Me ', const char _user ■. stle.t, loff.i '); 

ssue.: Ctlo.retd) (struct Hoed *. const struct lovec ', unsigned 
long, tmjii 

ssue.: ('no «rite| (struct iioco ", const struct lovee ", unsigned 
long, It-lfjt)' 

•reaodlr) (struct Ut ■, void \ MIdir.t); 

unsigned in: ("polll (struct die *, struct pc.;: :eb:e.s:ruc: '): 

int flocll) (struct tnoot *. struct He '. unsigned int, unsigned long): 

long ['unlocied.loctl] (struct die *. unsigned int. unsigned long]; 

long {'co*p4t.loctl| (struct die *, unsigned int. unsigned long I; 

in; I'awp) Istruct die ", struct » area struct '); 

int I'ope-i) Istruct Inode ", slru<; 

in: cikji*) litruct hit ", It.OMer.t Ids, 

int I'releaie) [struct inode '. struct I 

1M (''sync) (struct tile '. struct dentr, *, mt datasync); 

Int ralo.fsync) {struct kloct '. int datasync); 

in: {"ftsyncl lint, struct die *, int I; 

m: ('lock) Istruct die '. int. struct die. lock •); 

ssue.: Cwndpage] (struct die *. struct Bag* '. Int, stie.t, 
: '. in:); 

unsigned long |'git.uau(vtd.ar(a)(struct die ', unsigned long, 
I long, unsigned long, unsigned long); 

int ("check lugs) I int]; 

M I'llockl Istruct die ", In:, struct dle.lort •]; 

ssire_: Cspilce.w-lteKstnH:; pipe. mode. info '. struct tilt ". 
loff.t *, sue.t, uoslgnee ; 

ssue.: ('splice re«d|'str»ct die *, loff.t ", struct plpt.lnode. 
info •, sue.;, unsigned : 

int fs«!lMM){struct hi* ', long, strut; I 
}1 

You may also find that many operations are supported by this 
file. It will even help you to perform many other tasks like reading 
a directory structure and so on. In our case, we are not performing 
ihese types of operations. So you can set the corresponding entries 
to null. In our code, we used lite following formal: 

struct die .operations lFi_ops=( 
even: LfrjHvice.open, 
read: inr.dtYlct.reae', 
uritt: IFY.devi 



loft 
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release LL'v.davlccreLettt, 



) 



You may note (hat some modern drivers use another 
format, as shown below: 

struct lile.operatlons trr.ops - ( 
opt* ' LPv_#evtc*_oo». 
read i iPr.Mvlcr'fW, 

■riM - if-ramcijffH*, 

release ; inr_devlce e.release 

This is supported by a GCC extension and is helpful 
if you want to port your device driver. You can use the old 
formal (or this tutorial. 

Similarly, fdevf is represented by a file structure (you may 
look at 1'mux/fs.h for more details). There are a few points that 
you should note here. The 'file' (in this context) is a kernel- 
level structure and never goes to the user-space program level. 
But you should not mistake this for FILE, which is defined by 
the glibc library and is not a part of the kernel-space function. 
Our 'file' is not a file on the disk but rather an 'abstract open 
file', represented by inode (struct). 

Also, we have the inode_operations. For your information, 
here is the struct inode_operations: 

struct jm)«*_optr»Uont ( 

in: ['create) (struct inod* ".Struct Sentry MM, struct luariuti '); 
struct oxitr, ' {'lookup) {struct laode ', struct Sentry ', struct 

OMttdltl '), 

mt i Sink) [struct dentry •. struct inode '.strict deatfy •); 

in; i -unlink) [struct laode ', struct dentry •); 

IM I'syillst) (struct Inode ', struct dentry '.const char ■); 

in: I'attdir) (struct woo* ', struct Gentry '.intj; 

in: I'FMlr) (struct inode '.struct der' 

mi I'atnod) (struct Inod* '.struct Gentry \lnt,d*v,t); 

In: |'rru«>) [struct mode '. struct MM 

struct Inod* ', strict MMI 
Mt ('rtMllfta) (struct dentry ', ckar _user MMIi 
voli ' C'o:lw_:ini) (struct dentry •, struct n»eidata *); 
void (*fM_UM) (struct dentry '. struct ruweidita \ void '); 
void ('truncal*) tstruct mode '); 
ln[ | 'ptrilssion) (struct Mode *, lot); 
Int I'setattr) (struct *tolry ', struct lattr *>; 
in: foetaltrl (Struct vftavuM 'ant, struct oenlry \ struct tst«! '); 

MaftY] (struct dentry ". const tiw ', const void '.siie.t.mt); 
ssiie t (*|KMRr1 (struct dentry •. corn! cnjr '. void ', Ma t): 
SSlH.t ("llStxettfl (struct dentry ', cfjr ■, sl«_t); 
In: CrMovtiittr) (struct dentry ', const char *); 
void ftruntjte.TangeM struct wo-!- .off _t); 

long ('fallocateHstruct Inod* 'inc*. Int nod*, loft I 

1m): 

lat i'>«up|(struct lint* '. struct F««up.*> lent. info ', a** start. 
uM In): 
> 



Another important one is pip. which is (he instance of file 
(Struct): 

MM Ml _f.s«io»n(sir jtt lilt 'iilp, struct pld \ «nu» atd.type, Ml forte); 

Here Is tr* MMWM code corresponding to tie struct lite: 

strut: 
/' 
' fu_:m Hcoats invalid erter tiie.fr** is called and owned via 
' fu.rctnead for RCU freeing 
V 
union ( 

struct Ust.head fu.Ust: 
struct rcu.heafi fu.rcuhead; 

) '.u; 

struct path f juth; 

edthne l_ stent ry Oath, dentry 
•define f.vfunt f Mth.ant 

■MM struct N>. operations "f j>p; 

soinioci.t f.loeh; /■ I hM, no wq ') 

ato»ic_lonj_: f.coueii; 

unsigned Iflt f.Bags; 

fnode.t f_aede; 

iOlf.l f.pos; 

struct fow. struct fjanne; 

com: uruct cred 'f.cred; 

struct file.ra.sut* t.ra; 

»« f. version; 

etfdef CCWG.SKUUTY 

void 1 security; 

•endtf 

/' needed (or tty driver, and eayoe others •/ 

void 'privite.rjjta; 

■ifdef COtittO.EPuLi 

)• Used ey rVeventpc-U.c to lli* ill the hooks to this Ut 'I 
struct llst_Headf_*p_links; 

eendlf I- «lfdet UWIu.EPOtl •/ 

struct address. space 'f.oapplng; 
elfdef C»ftfi.DCBl)S.l«tTJUoiiT 

unsigned lc*g f.ant.urUe.state; 



■• 



You may have noticed that w<j have used a major 
niitnbei in our totlf. I'his is used while registcriiig the 
cha racier device: 

eitern int regis!er_clir9ev.re9ion|d(v :. unsigned, const char '); 
»>tern 1m register. cnrdevl unsigned in:, cons', ciar '. 
const struct He.operattons '); 

The major number is employed 10 indicate the driver 
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10 to used to access the hardware. And each driver will be 

assigned .1 unique major number. All device files carrying 
the same major number are handled by the same driver. As 
this number is unique, we earlier used cor /proc/deviccs to 
see the major number of the active devices. 

You may also note thai we have a mirun number (which is 
a sort of internal number) that is used by the driver 10 identify 
ihe different hardware it can access. (See the output of cat 
/proc/modules in Figure I.) 

You can also see the minor and major numbers of the 
devices using Is -I command (Figure 2). 

During the 'registration' (see the code given above), 
the unsigned inl corresponds to the major number and the 
const char * refers to the name of die device (lo appear in 
the output of cat /proc/devices). As we discussed earlier, 
we use the struct file operations *(ops to refer to the "file 
operations table*. 

When you develop an actual device driver, it is advisable 
that you consult tire documentation provided by your 
distribution to find out an unused major number. 

Some of you might be wondering how we are going to 
use the driver we wrote, without having hardware (clev) to 
test. We can create a virtual one using the mknod command. 

Before doing that, let us compile our driver. (If you find it 
hard to create a simple 'make file' for this, please refer lo (he 
previous article.) 

If you look at the output (Figure 3), you will notice an 
error. This is because we forgot to add a licence statement in 
our code. You can remove the error by adding (he following 
line to the code: 

•OOULE ltCfW£{'6Pl *T)i 

Now the driver has been compiled. Let's add (load) the 
driver to the kernel by issuing the following command: 

It is lime to create our device! We can do that by using the 
following command as the root user 

i.ix.1 .'dtv/Lrr.otvict c is: * 






• 



pit i* f *"■* 

ft4ltt,t<i*V*hdLW iCI--| Cftt /trocvMAiln 

tutfm 1I*H | - L>n hf imW I 

.dl Mtll • I In l.lamH 

Iff Itw 1 tlW 1 id*. klM *»'K*i*» 

IK Mil IU tin fefMIMM 

Ml IMt ll.'t 111 Lin ••fh*M4* 

9fYrl< IHM I *r» IMI. Lin *tlttt4tm 

«» MIi 1 Lin «irt}*«M 

•IMai UK ■)•» I Lin «i<IIMH 

r. MM • Lin tottWIMI 
i ftd n sli d p TIMC * - (In ■■I H »y w 
mtlllll tUM * UM tilHIMN 
(tW4r> UIM* 1 nMMttflt. II n «att«7MM 

■m i. iv inn • lit iiTn nm 

i»li>» llnj ■ U« lnflMTMi 
(t« JJ7I 1 HHD. Lin t.ti;^H4 
tut IJ1M 1 tin ♦i'ltrfM* 

itaii lint J Lin Miiiign 

Jttfdr. ltj« ( Lin UlIMM 

4*fl **k [M« i*» twu I Lin •itfllMM 

I'd Ul int»l :*W I tin IiIHUM 

tnd M» loan ^n< 1 iMiw look lll.vd Ida IMel. Lin 

t-d iHStg r>«» liMNi tsdet. tin hlulm 

itlijlt Hilt' UM t tin t.f 



Fig me 1: Output ol cat Jproc'modules' 
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Figure 2: Listing the devices with nujot and minor numbers 
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Bsa- 

t« W iw 1WM tW 

*>H»»,HH| lliMHU IQJ -I td ^9«tt3CJ*09 H lpl 

•atlLr^wiUdtmu Ma -/»utw/Hd.ln( mm 

UU I JIlMBdllfM M 1) trwtlt Ht/ball<H>/IM>«/Mtlli|iLliia/Snit>p/l* 

duln toduln 

WLttlt . Iittt'lnf IL'Kldry Vuir/irc/Uiui Pcjapri l.t 11 lldcwirpM' 

CC [HI inoH^M1Urln«T*i^rt4t3t>;«Daiilfl/LfT dtv.* 

•Ulltlid *MMln. >t«R I. 

MKVWT I Hduln 

«m« aooHM ■mi>d mewi Ltiimii i» /•*w/uii»i»«n>^9>iiiH/«Mim 

/lit tni 

vr IMlidr/llAui/nduir * for nr. Irfeiwimr- 
CC /fe«tc/Miuvtnrf*ivO«At3vi*«H>ftTi^L/f *r» «rt-t 

LD |R1 /hfln/*j>ii,lai r «j0ri*l3el«p«*lr*HM dr» U 

• i..f.a 4i'Kt«i> fmtfwtfUmm^kttth : • 11 ii-pn*ftt #m" 

Aittiv,n«ir>Adu>l Ka 'yDtL4tAf/Kdrfl»tt | 



Figure 3: Compiling the driver 



This actually creates a new file in the /dev/ directory (Figure 4). 

We have also specified (in the command) that u should be 
a character device (c) and the major number should be 161. 
You can see the new major and minor numbers of the new 
device we created, by using the fs -J command — see Figure 5. 

Our driver and device are ready for use. Let's send some 
data to the device (after becoming the root): 

Kho 'Voyage lo <*rnei* > /tf«v/LF>_dtvtct 

If you look at the code carefully you can see that this 
command can effectively keep on sending the data again 
and again. And now we can 'read' the device by issuing the 
following command: 



|p» f Vm jk-mu 

'!•» 'inr; nil 




Figure 4: listing at fdevl directory 
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CIS /deWlFi'_6>Ylce 

li will give us ili" output shown in Figure 6, 
One point we missed out in our discussion is the copy_ 
[romjjser (asm/uaccess.h)- And here is the code for it: 

fUtiC HUM lono eDpy_rro»_us*r|imid "to, 

conic volt _ut*r ' lie*, unuonen long n) 
( 

If t«cess_ot<VCTtfi_»£». 1<m. <i\) 

nmn capy.fme,.uSfr|:o, fro», «); 
MM 

return n; 



MUtc Inline long copv.to.ui*r|«>W _uwr "to, 
coni: voir! 'Item, unugne* long n( 



I 



■lohl.tlHPO; 

If {KCftS.Dt(VERIF«.W[T[. to, ft)) 
return _(opy_«Luief|:o, fr«, n|; 

tit* 

return n; 



I 



You can use the code given above to comprehend how the 
actual process works. 

One new (wader file thai we added in this tutorial is the 
ermo.h file. And here are the 'important numbers' from the file: 

IM» BKSTAfftsrSS'.? 

•oel.ne r»KTART(»I»T» 513 

> KSTAftTMrWtt $U /" reitir: ir no lundler.. V 
f<.oiK;LC»os:b r no lecrl uwm ■/ 

■ Eaesr/WI.KSTuftmMK 511 f mum Dy colllie tyt.reittrt.fytctll '/ 

tftwa Ml f lllrgil *f$ tilt UMtlt '/ 

•dehor EHOTStnc ill /■ upmte svixhronUitlon ■Ivutch ■/ 

•Arhw EMXowlf. 51 J f Cookie it it*> v 

«d«iiw BOTSUPf ttl /■ Optrttlen It not »upe«rt«« 'I 

idehu ETOO&ui 535 /■ suffer or request it too null V 

I EStsvfSfwtT 5}| /• tt unirtttt* stole error occurred v 

I ttWTTPE M) /* Type not moporteo bv ttrner •/ 

•dehw EAWBCW SW /' Heqwit Initiated, but Mill not coaelett 6*rore 

t Heart 7 

> £I«MU€UED5« /« iocs dueved, nil] oet cotolelioo event V 

> ElOCJKTItr S» /' Iocs turned. «lii trlfoer « retry '/ 




1, T HI* ■ti- 
ll. ::t MUM 
jm, i nw « 
:■>:. 1 ;»:i tl 
M, in ;»;» e: 
<w »»■«■ 

1, 11 Itbt « 

i hu *; 
i ittt ti 
t nil ti 

1 MM « 

i :»i» u 
i :•:•♦; 
* hi* « 

i m ■ 



in, 



figure 5: Listing the new file created 
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Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


tog 


Kernel 




oyage to 


KernelVoyage 


te 


Kernel 




oyage to 


KernelVoyage 


:c 


Kernel 




oyage to 


KernelVoyage 


*- 


Kernel 




oyage to 


KernelVoyage 


tc 


Kernel 




oyage to 


KernelVoyage 


Is 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


tc 


Kernel 




oyage to 


KernelVoyage 


H 


Kernel 




oyage to 


KernelVoyage 


te 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


no 


Kernel 




oyage to 


KernelVoyage 


tr- 


Kernel 




oyjge to 


KernelVoyage 


io 


Kernel 




oyage to 


KernelVoyage to Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to 


KernelVoyage 


to 


Kernel 




oyage to Kerne Wo yage 


to 


Kerne iTJ 





Figure 6: Output ol cat tfeWLFY_itonCt 

Now we know bow to write a driver for a device. If you 
wish to dig deeper into the subject by making a simple piece 
of actual hardware and controlling it with a Linux driver, 
please lei me know. I will include such experiments in the 
upcoming days of the voyage. 

Happy hacking! E3$" V 



By: Aasis Vinayak PG 



The author is a hacker and a free software activist who does 
programming in the open source domain. He is the developer 
of V- language -a programme language that employs Al 
and ANN. His research work/publications are available al 
www. aasisvinayotc com 
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Post: Unix Administrator 

Company: Crown Solutions India Pvt. 

Ltd. 

Profile: Should have 5+ years of 

relevant experience in similar field. 

Exp: 5-10 

Location: Chennai 

Email: sudha@crownso1ution.com 

Post: Unix Systems Engineer 

Company: Tecnotree 

Profile: Should be a UNIX Engineer with 

a complete understanding of Solaris and 

RedHat, Network Administration 

including TCP/IP. Network Routing. LAN / 

WAN.VLANs. Security, Unix Scripting, 

etc. 

Exp: 5-10 

Location: Bengaluru 

Email: sunil.chandran@tecnotree.com 

Post: Unix Administrator 
Company: Kabul Bank 
Profile: Hands on experience in 
administration of large Unix servers 
environment at enterprise level. 
Exp: 2-5 

Location: Afghanistan 
Email: recexpat.kb@gmail.com 



Post: Sr. Engineer - Test Automation 

Company: SafeNet Infotech 

Profile: Should have 3-6 years relevant 

experience in Test Automation using C 

language, Perl, Shell, etc.). Good 

understanding of Linux OS. 

Exp: 3-6 

Location: Noida 

Email: hrindia@safenet-inc.com 

Post: Software Engineer (C++, GDB, 

Untx/ Linux) 

Company: XlUS-bcgi (A Division of 

Megasoft Ltd.) 

Profile: Candidate should have 3-4 years 

experience and good C+ + 

programming skills on Unix/ Linux/ 

Solaris. 

Exp: 3-4 

Location: Hyderabad 

Email: shashi.mukkala@xius-bcgi.com 

Post: Systems Programming - HPUX, A1X 

Company: Oracle India Pvt. Ltd, 

Profile: Should be BS / MS Computer 

Science from Reputed Institute with 4 + 

years of research, design, and systems 

software product engineering 

experience. 

Exp: 3-7 

Location: Bengaluru 

Email: achappa.bheemaiah@oracte.com 

Post: Embedded Test Engineer - Linux 

Company: Impetus-People 

Profile: Applicant should have 2-4 years 

experience in testing Video drivers, 

graphics, video on Linux/ Unix, RTOS. 

Exp: 2-4, Location: Pune 

Email: careers@impetuspeople.com 

Post: Sr. Software Engineer - Clocks 
Company: Atrenta India Pvt. Ltd. 
Profile: Must have around 2-4 years of 
experience, with good knowledge of 
ASIC front end and / or back end EDA 
tools and exposure to HDLs. Exposure to 
Unix / Linux platforms. 
Exp: 2-4 
Location: Noida 
Email: career@noida.atrenta.com 
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for you! 

Top Companies Hire From Here 



'Cnaukri.com 9 

indw'i So 1 Job Si» 

► Over 2,00,000 Jobs ► Get Jobs by email 
► 35,000 Recruiters 



For Advertising Contact Us Lsndline: 91-120-4041700, India Toll Free: I860 500 5558, Email: support@nBukri.com 



LINUX ForYou 



FOSS 



The best place for you to buy and sell FOSS products and services 

HIGHLIGHTS 

■ A cost-effective marketing tool 

■ A user- friendly format for customers to contact you 

■ A dedicated section with yellow back-ground, and hence will stand out 

■ Reaches to lech-sawy IT implemented and software developers 

■ 80% of LFY readers are either decision inftuencers or decision takers 

■ Discounts for listing under multiple categories 

■ Discounts for booking multiple issues 

FEATURES 

■ Usting is categorised on the basis of products and services 

■ Complete contact details plus 30-word description of organisation 

■ Option to print the LOGO of the organisation too (extra cost) 

■ Option to change the organisation description for listings under different categories 



TARIFF 

Category Listing 

ONE Category Rs 2,000 

TWO Categories ...Rs 3.500 

THREE Categories Rs 4.750 

ADDITIONAL Category Rs 1,000 




Value-add Options 

lOGO-plus-Entry Rs 500 

Highlight Entry (white background) Rs 1.000 

Per EXTRA word (beyond 30 words) Rs 50 



KEY POINTS 

■ Above rates are per-category basis. 

■ Above rates are charges for pubtehing in a single issue of 
LFY. 

■ Max. No. ol Words for Organisation Description: 30 words. 



TERMS & CONDITIONS 

■ Fill the form (below). 

■ You can use multiple copies of the form (or multiple listings 
under different categories. 

■ Payment to be received along with booking. 



■K- 



Tear & Send 

Orgartsafoan Name {70 char actors) 
Doscnptiori 00 words): 



ORDER FORM 



lew & Send 



Ema»: 

STDCode: 



Address (wJ not be publsliedj: 



CATEGORIES 

D CONSULTANTS 

□ CONSULTANT fFIRM) 

□ EMBEDDED SOL UTIONS 



tfMMfa 






. Qty/Towm- , 



D HCH PERFORMANCE COMPUTING 

□ If INFRASTRUCTURE SOLUTIONS 

□ UNUX BASED WEB HOSTING 



D ENTERPRISE COMMUNCATKJN SOLUTIONS □ MOBILE SOLUTIONS 



Plrl a**j 



O SOFTWARE DEVELOPMENT 

D TRAINING FOR PROFESSIONALS 

□ TRAINING FOR CORPORATE 

□ THIN CUENT SOLUTIONS 



PtesefmdcndosedasunolKs 



_ tty [»■' MWaoesetJ cheque - tearing the No . 



EFT Ertierprtses fM Ltd. payable at Delhi. ( 'Mease atW fe SO on nen-meW) cnegue) towards the cost ot 

afcharosmycrwiicarfj D VISA OMaswCaid Please charge Pa 

aoarlS! my ere* tad Ho [_ l_ l_ l_ l_ l_ l_ L l_ l_ !_ L_ l_ 1_ L_ l_ 
DateorBrrth / /_ .tanmnvw Cant Ejpiry Data / imovyyr 



<, 



. h kw ■■■< 



. FOSS Yellow Pages aoVertisemenHs) 



CYVHo 



i!.'.- ■,*,!--■ , ■ 



LFY Enterprises Pvt Ltd., 87/1 OHito InrJustiul Area. Phase t New Del* 1 10 020 

Ph 011 36810601 03. Fai: 011 2681 756$. Entail iitoSetfinoltconi Website wwuerynrJaoom 



.if -'.'i | ..•.,. ii M ;.ir.Ii 



To Book Your Listing, Call: Dhiraj {Delhi: 09811206582). Somaiah (B'lore: 09986075717) 
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Dhiraj ([ 


)e1hn 09811206582, Somaiah (Bangalore) 099860" 
MoWe:09968T5SI77,fi)(: Oil -26187551 Bra)uctcyn.in,cynji8aw»b2J) 


^5717 




Consultant {Firm) 


netC RE 

The Imcwstxyi Company 






EmM: wmrji**0rii«compteki am 


group cstflborston software created 




IB Services 


Well: wwwttwipteki com 


by Cynapse, that rrtor-cormocts your 




t*re»taMMtono«3HUUnuc«n 


ot www raropteki in 


peopte wth each od let and th©* 


Metcore Solutions Pvi Lid 




Laplcce ana Desktops. TKn ctont 




coiectMkncviifrxfgo.seeniiossry. 


NO. t company lor provtctng Unux 




wfcjtfpfn hawdoo Dobianarid 




tt combnes iha capaCMasot 

Cc*accra!i^ tools iWwtos.Ci0gs.tiie 


Based Enterprise Mating soMon 
wnti around 1500i Customer M over 




Lfouniu. Laptops and Desktops 


Education & Training 




pri mwna wUtt Detain and UburaB, 




raposiories. micro toiogs, deX'uMiorn. 


mota. Key Solutions: 




Majrabon w GfAMjnu*. D»la 


Aptech Limited 


aucfo, videos, and odiersocal 


•Enterprise Matng and Cotaboration 




Recovery Nan Mtmbai 


IT. MMmeda and Anlmalon 


acptcabens nro a seamless p*3donn 


Sokrion •Hosted Emai Security 'Mail 




Kerala 


Educabon and Ttarmg 


cyrui I ieVe> Warns to butj coftjf.ijarive 


ArchiWig SoMion -Push Mai on 




ttotnk: 098474469 IB 


Mumto. 


Knowledge by sharing and decussng 


Mobile "Clustering Solution 




BMttfeMMlSpMJLnM 


Tel: 022-28272300. 6646230Q 


vanous farms ot dgcal oonfern wthn 


MumM 




Web: www 4>servK«.ai 


Fu: 022-28272399 


a jecure. unr«d appicaasn that « 


Tri. 022-66626000 






Ema4; cift1omefCAre& jptKTi.aa in 


acocssctousrigaweobascdritertace 


Motile. 09322985222 




0S3 Inloiech 


Web: www aptecft-edvcabwi-com. 


or b rch desktop cfont. 


Email kalp<l«iwtcore.co ai 




•S*« ScMiens Partner lor ntovei 'High 
*«3fcb%Campt<iQ8oUct»*Enf> 


www ar etu-multimedij .com 


Mtimbai 

Tel: 022-7&U5853, 2644562s 


Wet. www nelcore co in 








ir>«id Ocen Souce Scbtons Pimds 


IT -Campus: Academy ot itttormttlion 
Technology 


EniM' ktt9cynnpse.com 
Wet: www.eynwse com 






•Certfad Red h» Tranng Rm 






•Gcppctso and hstftiTonai Tmimg 


IT ttannrj and solution company with 




-^i redi ; 




NMHMM 


over 1 2 years ot experience, ■ RHCE 


OeeplWot Linux Pvt Ltd 




wmi immiiiii 


•Software Training •Hardware Training 


f\re & Exdusrve Free Software 


^^ 




Em*i' intoGos3»i1elecri,com 


•Mulimeda And Animation <Web 


Buaiiass. Creators of die deepotot 


Red Hat India Pvt Ltd 




Web: www 0*3*1 lolecfi com 


Designing ■RnanoBI Accounting 


Mai Server. We provide: autight 


Red Hal s the worta's leedng open 






KoapaJ.) 


sotuiions. sotd support and Freedom 


source solutions provider Hod Hal 




Taashee Linux Services 


Tel 0744-2503 1 55. Mobtt: 09628503 1 S5 


We believe in: sharing, compassion 


provides Wgh-quality, atlordable 




100% Support on UNUX ,OSS 


PKtHMNRM 


and plain acton. Backed by Ul-ome 


tachnotogy vwth Its operating 




« JBOSS related protect*. We 


EniM: m InlokSyihoo com 


hacte*. Ouk* deployment, easy 


system platform. Red Hat Enterprise 




specWbs In hajh-avaftabaty and 


Web: www deeKc4u.com 


management. Guaranteed, 


Lirui. together with sppications. 




tiigh-p(VtorTTaBnoectjSierS,reiTioie 




hngak«t 


management and Services Oriented 




and oridtfi system management. 


Matian Computer Services (1) Limited 


W.OB0-We90OO0 


ArrJiitoctura{SOAJsoluWr8,inctu(t»ig 




rwWanwfo wn* *i a/ilami 


Eslabtahed In 1990. the organlzauon 


Eiiuii: jarteMeeeiooi eo v 


JBoss Enterprise MaWeware. RM 




plenning, Lnuic S JBOSS consuKiig & 


is primarily engaged (i Education 


we»:wwwde(t)iiK)im 


Hot otso oners Support, training and 




Support services. 


arm Tranang Ifvougn its own & 




crxtsudng sorvtces to its customors 




rtfdsrvoM 


Franchise centres « the areas ot IT 


ESWBE Communications Solutions 


woiUwido. 




Mobile 09392493753. Fa. MO-MI 31726 


Software, Hardware. Networking. 


FMLtd 


M uno* 




Emarf: {Turojfcumfnardluslwt.cofli 


Ratal Management arel English. The 


Founders ol ESCUBE are facrity 


Tel 022 ■ 398 78888 




Writ: www taashee Com 


rotitute stso prewies customised 


at the Indan Institute ot Science. 


Email marttptin^-miirodtwt com 




Torrid Networks Pvi Lid 


tratwig for corporates. 

Hew MM 


Bangalore and carryover eight 
decades of experience and 


Wet: www.redlul ai 






Tomd is a loodmg provider of 
HomiHMMctinotogyoonMMng 


Tel: 01 1-25916632-33 


fundamental knowledge In the IWd 
of DSP and Teiocornmunicafccn 




EmM: nlKtmaniAKKMccvn 


Hardware & Networking 


with focus on tntormatton Security 


Web: www mjtfiamnda.com 


ESOUBE plays 6 domnarrt rolo In 


Institute 


BarvkM and Optn Sours SoUiMt. 




the creation of f in the doman of 




Noidi 




Sensors, Signals and Systems. 

Bangalore 


Xenilis Tecivnoiab Pvi Ltd 


% 0120-454S100. Mebfc: 09015505583 


Enterprise Comm, Solutions 


Xrjrt1i& Tochnou* is the flrsl of its 


RKfOMBMH 




WOW- 235 17063 


kind, stata-ol-lhe-an IWrsstructmo, 


Fj»j*,urix>>issim><ttotn*>etwwlts.ccm 


Aware Consultants 


Email- mfoOXssqut* com 


Hardware. Networking and 


Wet: www.iomdnfltwwks asm 


Wa spedaba h buMng and 


Wee: www.escutw com 


IT Security training Institution 




managing UbuntiwDebian Unux 




headquartered n Kofkata 




servers and provide good dependable 

system admrtstiabon. We instael 


Keen & Abie Compulers Pvt Lid 
Microsoft Ouuook compattle open 


TechnoLab is the training division 
of 3Geniii5 group ol Companies. 11 


Computer (UMPC) For Linux 


And Windows 


and maintain n-houso corporate 


souce Enterprise Groupware 


is the proud owner of 'Aamar PC', 




sorvcre. Wo also provide dedicated 


Mobiopush. FmaH Synong ot 


the most popular Desktop brand ol 


Comptek Inter national 


and shared hosting as we* as rotable 


Cofflaco/Calcridor/Tasle wtih 


Eastern Inrka These ranges ot PCs 


Worlds smasest computer comptek 


vwciOS&TiytmO nc-tworWng. 


mobtos 


ere sold in the west undor the brand 


wtoran Bi UMPC wth Lnux.Toucft 


laajpjIM 


•Mai Archrvaf >Mal Audtng -instant 


name ol "Aamcru PC', in the north 


Screen 1 G8 RAM60G8, vW-R, 


TH:fff»-26724JI« 


Messagsit) 


as "Aapna PC' and in ihe south as 


Webcam, upto 6 hour battery 


EmaJ : salesQawara.co in 


MiwOtlv 


■Namrn* PC 1 . 


(opt.). USB Port, max 1600. (200 


Web: wwwaware coin 


Tel: 01 1 -30680046. 30660047 


Kotuu 


tescfubon, screen 4.8'. 18 , xZ2E> 




Motile: 0981 04774*8. 09891 074905 


let 033-22893280 


Size, weight 526 gm. 


Cynapse India Private Limited 


Email. mtoateenablD.com 


Email: snnku3xmiusgroup.com 


Hew Mb 


We are the croaicrs or open source 


Wet: www.kcerwi&ie com 


wet: wwwlecfiorioiatiiieiicorri 
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To a 


Dhiraj it 


Jelhi) 09811206582, Somaiah (Bangalore) 09986075717 

Ciovflr Infolech Prrva I B Li mi led businesses by tewragtig open source HXit Solutions « Education 


IT Infrastructure Solutions 




Oover infotech is a leading 


technologes with excetlent support We provtde Open Source Solutions. 


Absolut info Systems Pvt nu 


technology services and solutions 


& avoidable costs. Out expense MgraMdn lo Lnux from any 06 and 


Open Source Solutions ftm*J». Hod 


provider. Our expertise fees n 


induce custom soltwaro dovoiopmcni Trading n (jnux Kernel. Oovlco Onvor 


HM Ready Busnoss Partner, Mai 


■rocfdnQWrttrwtdoypjoducli 


SlTfrastru^uracteplOvrnerursiiXXlrt &M)lopmonl. Linux AdmWslralion i. 


Stjrvers/'Artispam.'GUI ntortaca- 


related lo Applcmiort. Database. 


for at industries. Ernbedded Systoms. 


Encrypuon, Clustering 6 Load 


Mddteware and Infrastructure. We 


eangUore Mumei 


BUmano-smomM/m^nm 


enaWaourcfiohtstooptimuoihor 


TH OHMI 243227, MoWe 961 It 2H52 Tel 01 84 -403244 7 


Cfcents. Network and Host Monitoring. 


business through a combination of 


Email mtofrgnrtortwoias net MMila -91 9896926759. *M 902221 1047 


Security Consufung, Solutions. 


best Industry practices, standard 


Weti: www ignitlanworks.iKI Email- irtfoOiixjtsolu1iMS.com 


Staffing end Support. 


processes and customoad dent 


WeO' www.rurtsorutwrra com 


«cw uow 


engagement mode*. Our core 


INC5RE^ PiaMtAulorwtHonrMLW 


HfceW-tt 1MMH 


services include Technology 


Fax: ♦OI-IMITS 1823 


ConaAng. Managed Services and 


M—'ffi Racer is laadrtg providers of IT 


MoM*: ♦91-9673839960 


Appecaliori Development Services. 


Ingres Corporation tnliastructuro Solutions . Wo are 


Enual: iffft^f'i p^jftrtwf fltff! 


MMttl 


fngres Corporation s a loortng prcnWw partners of HP. Hoohal, Coco. 


Web wwwjisplglobal com 


Tel: 022-2287 0959. Fax: 022-2288 1318 


ct coon source dataoase software Vwmaro. (Vtcrosott arid Symantec 




KJfcifJIMI WW 


ardsi4jcort services, trigres powers OurccMaiipertaoaxistsin. 


Advent Infotech Put Lid 


Emu: (usmejsCckwtriiilnieeti com 


customer success by reduohg costs Coroulrig. butdrig and Mwitarunf) 


Advent has on experienced tocnno- 


Well: www dovenrttotedi com 


1f»rx)ghhglirytino«ilM» products the Comploto IT Infrastructure. 


■nartteeng team with sevural ynars et 




that are halrttrks of an operi source Bangalon 


experience in Networking fi Wacom 


DeepHool Linux Pvl Ltd 


dajioymeritarxlurioueJy designed W: 08042823000. Fax: 08W2823D03 


business, end Is already making 


Pure & Exeksfve Free Software 


lor bueniM crtical aprJcaeorw. Email: iolutionieoacciaLrlom atiori mm 


oMerence in marital place ADVENT 


BuHness. Creators of the deepOfe 
Mat Server We provide: airtight 


Ingres supports (a cussomers wOi a 


We* vrww.pac0auton1atior1.eorn 




quatftes more as Value Added 


vtxart cornrruirly end world dass 






Networking Solution Company, we 


solutions, sofd support and Freedom 


support, gtobeiy Based ti RrxJwood 


^B redhat. 




offers much to customers than just 


We beieve wv sharing, compassion 


Oty. Cattorrfa, Ingres has major 




Routers, Switches. VOIP. Network 


and ptain action. Backed by tut -lime 


clevrlopmerii. sdos. and support 


^w- 




Management Software. Wretess 


hackers. On** deployment, easy 


Centers throughout Ire world, vd more 


Rod Hal India Fvt Lid 




Sokaors. Meets Conversion, etc, 


management Guaranteed. 


then fO.OOti customs nrfteUited 


Red Hats the vrortd's tearing open 




NewDeM 


ftangafori 


Stoics and rxttmatcrvily. 


source sokjrjoris provider. Red Hal 




at wmmi,w\ami2 


MtaMMMM 


NowOtH 


orovidoa high quatty. aDordabM 




r*ctti«w«M 


Email: starttMutmM.coM 


Tir 1 1 -4051 4 1 99. Fu: *91 22 66459537 


leclinotogy vwth its operating 




Enttt «*mtiagMM«na 


Vretj: www oceerwi «i 


Email: satesrjh05res.com: KitoOiriQres.com 


system platform. Red Mat Enterprise 




MMHHBraHUiM 




Vretj: www.inores.coni 


LinuK. togedicr wttti appfcanons. 




Web: www.adventciretJWiig5.corn 


Duckbac* Information Systems 




management and Services Oriented 






Pvt Ltd 


Keen & Able Computers Pvt Lid 


Architecture 1SOA) solutions, incfuolng 




Asset Info lech Lid 


A sottwaro house In Eastern Incta. 


Open Source Sc*ution$ F^ovider. Red 


JF3os» Enterpree MrJrJeware. Red 




We are an IT sdution and tiannfj 


Busness partner ot Microsoft. Oracle, 


Hat Fteady Business Partner. Mat 


Hat also oilers support, training and 




company wittt en ejpenence of 14 


IBM. Qtrix . Adobe, fiedhai. Novel 


Seivrn/Ai^sparnfGUi interface/ 


consulting services to its customers 




years, we are SO 9001 : 2000. We 


Symantec. Mcafee. Computer 


Encryption. Ouslerirvg & Load 


worldwide. 




are partners lor RedHat. Mttrosoft. 


Associates. Veritas . Sonic VVal 


Balancing - SAP/aadiVWetVTnri 


MMM 




Oracle and al Major software 


HUM 


Olenis, Network and Host Mentoring. 


I»1022-3987688S 




companies. Wo oxpertiso in legal 


MiWMMWmMMMMia 


SeciMyConsuriing. Soajfccns. 


Email: martceung-indrerlhat com 




software ans solutions 


Fu: 033-22906152 


StarllrigandSupporl. 


WM: *ww ledtial «i 




Denranin 


Emirf : isistMucttwck com 


New BeiRi-t 10019 


Tel; 0135-2715865. Macule: 0941 2052104 


Web wwwduckoack.co.ln 


Tel: 1 1 -30880046. 3088OM7 Snj.in Technologies FM Lid 


Enwt ; piyvBti« mkI net .ill 




MofciK : 09S1 0477448. 09S91 074905 Sryut is an I f consuiting company 


Wee: www.asstt.MUn 


H8S System Pvt Ltd 


EMI: iaMKotnsMi.com engaged m designing and 




System Integrators & Service 


Wet: wwwJmnac4t.com building web applications, and IT 


BakBone Software Inc. 


Piovidar.Parlner ot IBM DELL HP. 


Infrastructure systems using open 


BaKBone Software tnc. deivers 


Sun. Mterosolt. fleohat. Trend Mcro. 


IDS Irrlotech FVt Lid source software. 


complexity reducing data protection 


Symentic Partners of SUN for trw 


(s the authorised partner lot RedHai NtwOetM 


technologies, ndudng award-wMwg 


new startup E commerce nttatrve 


Una, FAcrosoft. AxJobe. Symartoc, tet 011-26225926. Fm: 011-41608543 


Unux solutions, proven Solaris 


Solution ProvirJw on REDHAT. 


Orade, IBM, Corri etc Software Email: buwiessevlfari-iri 


ptcAcMartfapptfcaTferHtauwd 


SOLARIS* JAVA 


Services Ottered: •Coftaooratrve WeO wwwsriian in 


Wtxtows offerings that ratably 


New Dean 


Sofutioris *Notwork Archrtocture 


protect MS SOL. Oracle. Exchange. 


W 01 1 -25767 1 1 7 , 2582680 1/02/03 


•Secunty Solutions •Disaster 


r ^ 
lo adveitise in this section. 




MySOL and other business crttical 


Fix: 25861428 


Recovery 'Software Licensing 


(ileasc contact 




appiCMtona. 


BMKatnttlObJNIrMfca.com 


■ArtrvTutSduWra. 


Somaiah 8' lore: 
09986075717) Dhirai 




n. n^u 




Mumbai 




MfMMamn 


IgnHJonWortes 


MWIHIMOIIII 


(Delhi: 0981 1206582) ■ 




r_.J. *«*^rla it JiMh il-li nna *uun 

UMl. iSrTMM.guplainidNHm&QQin 


IgurtJonWorks provides customized 


Email: salesQ losinrotecfi.cam 


0T1-2M1-Ou02FJCui. 222 




Wrt; www bjtVbofi? com 


ft solutions lor smal/rnedum 


We*: www MMMHI «em 
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TethnolnfotecH 

A company foaissed on Enterprise 
Solution using opensource software 
Key Soutwns: 

• E/itGrpnso Email Solution 

• wemet Security and Access Control 

• Manacxxi Service* tor Email 
Infrastructure. 



M 022-66J38990: 6*1 3M 
09326037210 

ifotncncom 
MM 



■re bodied with exceptcnaly good 
quality and low costs 



Tetra InJofmatwn Services PVt Lid 
Onao< the loadng open source 
provdera. Our cost otfectrva business 
ready soUions caters ol a) land o< 
ndustry ^nicies. 
■MtOaN 

Tel: 01 1 -46ST13I3. FjjcOI M1620IT1 
Eaoi: SJieseutrain.axn 
v lelrnit.com 



Tux Technologies 

Tux Teehncitoges prmidos consulting 

and solutions based on unut and 

Open Sounds sciftware. Focus areas 

nokxte migration, mal servers, 

virus and Spam tteririg. ekxtttitng, 

kBwaii. prewy sarvars. VPNs, server 

optimization. 

New Delhi 

Tel: 01 1 ■ 273481 04. Mobile: 0921 20981 04 

Email: lnlfr»tuxtocrin<*iaj«.t«jn 

W»b: www luitKtinoloain to in 

Veens W otek Private Limited 

An organization provkVig soMKra 

in the domains or Wiostruclure 

Integration, Information integrity, 

8u at n w App»cattonsand 

Prolessjonal Services, 

CkNMl 

Tel: 044-42? 10O0O. Fax: 28144936 

Email' in1oOveeru.com 



Linux-Based Web-Hosting 

Manas Hosting 

ManasHosing a a EJangatore- 
basod company that is etodcalod In 
helping small and rnxfcee business 
companies to roach customers orme. 
Wo boteve that by creating a wobsto, 
at you haw* is pusi web presence: but 
to get effective traffic on your website, 
1 it squat/ Important to have a wel 
designed One. This Is nvhy we provide 
the best of Web Hosting and Web 
Designing sauces. Also, our services 



W:0erH24O030O 

Enurt «KMry9mara$nMhnq com 

Web www m*nasri05ti«o,cam 



Linux Desktop 

Indserve Infotedi FM Lid 
Openbt Linujc with Kajcutate 
(Fnondal Accounting & Inventory 
on Unux) otiera a cornpiate Lrux 
Desktop tor SME users Its affordable 
ffts 500 + tax as specs* scheme). 
Friervjy (Graphical userinterlacet and 
Socuro (V*us *•»). 
NwMN 

Tel: 01 1-26(114670-71. Fax; 36014171 
Emaa: HifoOooenbccom 
Web: www.ooenli.CTni 



Linux Experts 

intaglio Solutions 

We are it>e training and testing 

partners ol RedHat and the first to 

conduct RHCSS exam ndet* for the 

first time ever 

Now Den 

M: 01 1-4156291 7. 4S515T95 

Email: OTloOinla9Jlio-soUi1ionj.com 

Web: www.inljgio-30lutions.com 



Linux Vendor/Distributors 

GT Enterprises 

Authorized cfsbtxjtors tor Red 
Hat and JBoss range of products. 
We also represent various OSS 
Arjrjtcaticos and Developer Tcote *© 
SLtSE. VMWare. NoWa Ol, MySQL, 
Codcweavers, Ingres. Sybase. 
Zmbra, ZerxrA PHP Company, High 
Portormanco Compulng Sokjtcns 
from The PortarvJ Group. Absofl. 
PathscaWCIcKjc and Wel Compters, 
Scabs Messaging solution on Linn 
Platform 



t«0biie: .9I-964S«I99W. .91-9343861718 
Enml : jalesoojte-irxiii-ceni 
Web: www.ojte-india.com 

Taurusotl 

CcrtacJustora^LJruxDstnbuiioit 
at reasonable rates. Members get 
aiJtona)£tecDurts and Free CJ>DVDs 
v* each purchase. Us* our webata 
lor product and memterstip detail 



Mobiie : 0986MS9928. 09692697824 
Emi*. UurusotrBginiLl mm 
Web: www.tsumsoft-netlinrocem 



Software Subscriptions 

Blue Chip Computers 
Awrfablo Red Hal Enferpnse Linux, 
Suse Linux Enterprise Server / 
Desktop. JBoss. Oracle. AnCserve 
Bactax>. AntiVeus for ma, Verisign/ 
Thowto'GeoTnxjl SSL Certificates 
and many other original software 
Inansnt 



Tel: 072 ■ 25O0 1 B1 1. MObtle 0982 1097238 
Email tduecNrjttvuii «m 
Web www Wtreonip-inaka.eoni 



Software Development 

Can/en Software (P) Lid 
Garttons lagsmp product Is Rarwnat 
Intranoi Server, a Complete megroted 
software product cortsisung nxxKios 
tike mal sever, proxy server, gateway 
inti-virus scanner, ami-spam, 
groupware, bancWdth aggregator 8 
manager, flrewal, chat server and lax 
server, infrastructure. 



W: 044- 24958222, 8228. 92» 
Ema1i.n1foOcan2cn.com 



DeepRool Lmu< Pvt Ltd 
FUe S Exclusive Free Software 
Business. Dealers of me deepOfn 
Mai Server. We provide: airtight 
solutions, sold support and Freedom 
We believe In: sharing, compassion 
and plan action. Backed by fun-time 
backus. Que* drxjigymenl, easy 
management. Guaranteed, 



Email startOoeeorooleo in 
Web: www.oteproQi-in 



ju 



3fc 

FnfoAxon 
TKHSOLOCIES 
InloAxon Tcdinalofes Ltd 
WoAxon designs, devoloos and 
supports ontorprse soxrtions stacks 
tevorogmg open siondards and cpwi 
source (ecrirxxogies WoAxon's locus 
areas ate Business Inleagence. CFN. 
Content S Knowtedos Management 
ande-Learning. 



M 1 20-4SSO040. Mobile 095 1 04JST60 

Emaul saiesOinloaxon com 

web: ritto^opcniouicxi-lrtlftiwn cam 

Integra Micro Software Services (P) 
Ltd 

rnicgro focuses on provicing 
protosstoriet sarvioes tor software 
davetopment and IP oonoraoon 
to customers- Integra has a major 
practice m offering Tetecom Services 
and works lor Telecom companes. 
Device Morufacturers, Networking 
companies, Semicccxjuctor and 
Afitaatbon otorotopmenl comparites 
across Ihc Qk*o. 
Bangalore 
ItlOBO-2B565a01lW,FM:OSC«856580<J 



Web: www iixegrarnicioMrwces.corn 

iwebtune.com Pvt Lid 
rMbtune-oom is your one-stop, total 
web site support organsaton. Wa 
provide TK)h quality website services 
arel web based software support to 
any kind of websites, Irtespectiw ol 
the domain or the Industry segments. 



Te£08O4tl$29a9 

Email: sanlosha iwebtLKie.com 

Web wwwfwfiibtLine.com 

Sarvasv Technologies Pvt Ltd 
VVW) OSX wrx*y«s Linux Mol*t 
LAMP W3C apps. Agio. BOO. 
TOO o^velopmenl. On Demand, 
SaaS. EFtP. CRM. HRM Open 
Source rnegiation Onine project 
management VCS (gx. svnx 
automated deoloymerit. 



Mobils:fJ97i 14J74S7. 098tH7eg48 
EmaU: sai«sOnnnLsv. In 
Website: www. urrta in 

Lntslal Systems Pvt Ltd 
Unislai is ptoneor n Data Recovery 
Softwaro 4 Services. Wk, Unetat is 
national sates & support partner For 
EVtDcfender Anbvirus products. 

HewOaN 

W 011-J6288SBJ.FW 011-?6219M6 
Email: EUtesOonistJi.com 
Web: www.unisiilcom 



Software and Web 
Development 

Bean eArthiiect integrated Services 
Pvt Ltd 

Amplication Dwoloprrant. Web 
Design. SEO, Web MarKetng. Web 
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Dhirai (Delhi) 09811206582, Somaiah (Bangalore) 09986075717 


r>wloRrment 


Provider. Providing Small Size 


Jthmedalud 


Maze tret Solutions (P) Ltd 


N*ri Mumbii 


ThrvCsent PCs & a Fufl Featured 


lei 079-40027K6 


Maze Net Soajoon (F^ Lid, Is a peneer 


Tel: 022-27821 61 7. HoWt: 98201 S656I 


ThnCkOnt OS to perfectly suite 


Email: dectiomechSetectromotft-inlo 


in prcvidng scruhdns through on 


Fit 022-2782 161 7 


needs ot ckfloninl working 


Wet: www etcctrofliectilirlo 


tn-o. quality detverables n the «ek)s 


Ema* inlodeskCbeanarchrtect com 


onvtronmoni. Active Doalor Channel 




01 EtPO. Sottware and Networking, 


Web : www be jnwcMtect com 


al over India. 


Focw infolech 


wtiio crovong outaandkig tranng 




&4»ni 


Focu2 tntotoch Advanced Educaiion 


loastxngiTPiotassionatsandCatl 


Mi Site Takeaway Website Pvt Ltd 


W.: <t2e0-320Mo0. 3241732. #51732. 


is the quality symbol of high-end 


Center Executrret- Backed by » t**n 


Our product Is a unkjuo concept in 


Mob*: 083771 07650 . 09898007650 


Advanced Technology Education In 


of professorial workforce and global 


India usmgwhich s person without 


[triad: feifoQerfeaywoTid com 


the state. We are providing exceJem 


akances. our prime cttectve s to c"er 


having any technical knowledge can 


Web: www eniaywerld.com 


services on Linux Technology 


the best litend Of technotoges m the 


create his website within i hour; we 




Training. Certifications and live 


spheres of tnfbrrnauon Technology {Tr) 


also have a Customer Care Center 




projects to students and corporaies 
Sine* 2000. 


ana kitormaticn Technology Enacted 
Services OTES). 


in kxl»a lot any kind clatter sales 


Training lor Corporate 


help. We are already soring it world 




Cochin 


Ctwmai 


over with over 65.000 coewssofd. 


Bascom Bridge 


W 0484.2335324 


Tel 044 45582525 


K coma* wfth FREE Domain Nam*. 


Bascom Etioge is Rod Hat CerMiea 


t mail: enquryttrlociuwlotech com 


Email. mToCm12enetsoiutj0n.com 


Wen Hotting and Customs Care 


partner tor Enterprise Linux 5 and also 


Wet: www.lccuhnlotech com 


Well: wwwituuenetsokibM com 


Center IcrFre© Support via Phono 


provkfng ttflrwyj w the rxhtduais 






and Email and features like PayPal 


and corporate on other open source 


C-TEC Computet Education 


Netweb Technologies 


Shopping Can. Guesibook. Photo 


iocrvx*xj«i Ike PHR MySQL etc 


ISO 9001:20rj0 certified IT 


Sn^pnied yd tcoWiie>4cyiQe$oiuticiri6. 


Gallery, Contact Form, Forums. 


Aftftieeww 


Company, Inter national Testing 


tmtttm 


Bogs and many mora. The price 


Tel: 079-27545455— 66 


Centre. Specutsed In fWjtimecka 


Tel: 080-4 1 1 46565, 327 1 95 1 6 


otcompteto package is lust Rs 2,099 


Fie 079-27545483 


& Animation, conduct MCP, 


Emiil mfoSnctwetiinOu com 


per year. 


Email mloebiswmiyiiiee com 


MCSE 2000. MCOBA and MCSA 


Web: www.nvtwtbindia.com 


Bjttfc 


Web. www.b1scomDne9e.00m 


certincatos. CCNA. CCNP, 




Mob*: 91-9W0531682 




the Only authorized centre by 


New Horizons India Ltd 


Email: panle<pamrsfie.co in 


Brairin*! 


INTERNATIONAL AND EUROPEAN 


New Horizons India Lid. a |Olnt 


Web www mrvie co .in 


Xotkats 


COMPUTER UNION 1o conduct 


venture ot New Horizons Worldwide. 


SataJi Software 

We are speqateed m doreiytofl 


Tel: 033-40076450 


rCU. Adobe Certifications, training 
on Web Designing. Tally. Spoken 
English. Conducts Corporate and 


tnc. (NASDAQ NEWH) and the 
Shilram group, is on bicken company 
operational smce 2002 wnh a global 


Web. www biamw ,«e- 1 1KI1.1 con 


custom strategic software solutions 




institutional Iramng International 


toot prim engaged In the business 


usng our sow foundation on loosed 


Centre for Excellence in Telecom 


certifications issued, 


of knowiodge duVvw, through 


industry domains and tochnciogiDS. 


Technology and Management 


Bangalore 


aoquting. oreanng. dovokipirig. 


Also providng superior Sofcrbon Edge 


(CETTM), MTNl 


Tri 080-43567000 


managing, fending and licensing 


10 our Clsnls to enable mam to gain 


MTNU Centre (or Excellence 


Email: 0jtecinrlir1rij91rQoma1l.com 


knovitedgelniho areas of IT. Appitod 


a competitna edge and manrire 
Ihew Return on Investments (ROT). 


ii Telecom Technology and 
Management (CETTM) a a state ot 


Gujarat Inlotech Ltd 


Learning. Technology Services and 


Supplementary Education. The 


hiMi 


the an facity 10 impart Technical. 


GH is a rT compnay and 17 years ot 


company has pan India presence with 


Tel: 01 1-41648668, MHH 


'.' ntgi ri J .-i s ■ operate tr...-.-,.: 10 


expericenoe m compute* trailing field 


IS offices and employs 760 people. 


ttnM: ceoastoMonwwtMm 


Trjocom; Management personnel 


Wo have mpononco and cerated 


fwwDflthi 


Web: www silanMnwafe.com 


CETTM has AC tectum hats. 


tocutty tor the cpon Source courses 


Tit Q1M361 2400 




computer Labs and residential 


Koj Roohai, Uoantoo^nd PHP. Mysat 


Emitl mft^nrunaa com 




laality 
MMM 


Ahmeoabed 


Wet www. Dlirndkj com 


Thin Client Solutions 


Tel: 079-27452276. Fu: 274 1 4750 






Tel' 072- 257 1 4500, 257 M5S6. 257 1 45BS. 


Email mtoagujaretinfotech.com 


Network NurS 


Digital Waves 


25714586 


Wed: www BUiMrtMlotecti com 


mdas only Natwcrtdng Institute 


The 'System Integration* business 


Fac 022-25706700 




by Corporate Trainers. ProwJng 


urtl otters errd-to-end Solutions on 


Email: contacKJccttm mtnl.in 


lynus Academy PvUtd 


Corporate and Cpen classes 


Desktops, Servers. Wcfkstaoons. MPC 


Web: hnpy/cellm.mtnlin/infra 


Indas premier Una and OSS ttaWnr, 


for RHCE ; RHCSS trainng and 


Ousters, fender Fame, Networking, 




metitute. 


certmcarion- Conducted 250+ Red 


SecuritySurvefence & Enterprise 


Complete Open Source Sotutions 


Chennai 


Hat exams w«h 95% result n last 9 


Storage. WJh our own POWER- X 


RHCT. RHCE and RHCSS tramng 


Tit 044-421 7 1 278. 9840680558 


months. The BEST In APAC. 


branded range ot Products, wo oiijr 


HjtMM 


Email. contaclusBiyruucadamycom 


HHtrO»M 


complete SokJOcnj lor Anmsxm, 


Tel: 040-66773365, 9649742065 


Web www.tynusacaOemy.com 


Tet 46576990-2 


HFC Ousters, Siorago & Tr^rr-Cssni 


EmM; ray»k sjjjeelOflmail.com 




Mosil e 093 1 0024503. 093 1 24 1 1 592 


Computing 


Web www oossindia com 


I inui Learning Centre Private Limited 


Email mfoSnerwDiknuis net 


Mutate: 09B807 15253 




Pioneers in vatwq on Uwt 


Wee: www.nelw0fkJiL1ls.ncl 


EmU- f anpaQtfigitatwarH.in 


ElectroMech 


technotogtoe. 




Web: wwwdigiutaaresln 


Redhal Lrux and open source 


BangaJom 


STG International Ltd 




scMon , FtHCE. FUCSS training 


Tit.tB0-2242a53B, 26600839 


An IT Tranng and Sokmon 


Enjay Network Solutions 


and exam cwiter^hmedabad and 


Email: mtou4iruidearningcentro.com 


Company.Over an exparlence ot 


Gujarat based Thncneni solution 


vadOdara 


Wet: www linuile.lrningtcntie Com 


t4yeare We are ISO 9001 2O0O 








wvwv.LifluxFotU com 
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Dhira, (Delhi) 09811206582, Somaiah (Bangalore) 09986075717 


Ortfed-Awhonsed Trartxj Partners 


an extensive tranmg n Ngherxf 


Cyber Max Technologies 


DnlZTRIX E Technologies Pvt Ltd 


ot Red Hat & IBM-COS. We covet al 


certtcatcn programs and Networking 


OSSSoajtion Providei. Red Hat 


No. 1 Training prvinder in IMs regoi. 


Software Trartngs, 


Sctutcns ito Rodhat Unux, Redhal 


Trimng Partners, Orade.Web. Thin 


meerut 


New EMM 


Secuflty Sendees. Coon, Sun Solaris, 


Oonts.f*etw^ndngand Security 


let 1 21 -40201 1 1 . 4020222 


Tel: 01 1 -40560941-42. MoMe: 


CyOor Secunty Program r3M AK and 


Cco*u*amwA*»ova*>woCCNw 


Mobile: 09927666664 


tammm 


so on w*ti a strong locus on quakty 


and Oracle Training on Limn. Also 


Email laiOiinlnt com 


E ma*: ralui|fJslg.in 


standards and proven wchnoiogy 


avaiabto Laptops S PCs 


Wet): www.iHnru.com 


Web wwwstojHilnecwii 


processes with most prokxrid 


Mm 




MMt*1 a #9M0M 


prrxctes of Love and States Santos. 


Tel: 01 5 1 -22021 05, MoMe: 099281 73269 


Indian Instrlute ol Job Oriented 




Mob*: 093937331 74 


Email: cmtecti.cjIkanenTgmaiil.com, 


Training Centre 


INS Institute ol Information 


Email: aid.rrYbcKiarnrita ac.ln 


iu.gupla ashisbOgmal. .com 


mmmm 


Terminology Pvt ltd 


Web: wwwarrrnlalryd org 




Tef:079-40072244— 2255-2268 


JoviRBdHai trailing and get 100% job 




DisftJ Institute 


MMile: 09895749595 


gauam«e, VtoWstnort rwpected 


Centre For Industrial Research and 


A franchisee ot Uwoft TedTneeogtee. 


Email. mfoQNjt net 


Lmux cqrtficaion Ailof RodHat 


Staff Performance 


Piowtng T Training & Computer 


Woej: www-lit i«t 


training, you aro road/ to pm asa Lnu* 


A UnKjuo Institute oatonng to 
the need for industries as wei as 


Hardware S Networking 
Oehrattun 


institute ol Advance Network 




IKK UBHH 


Students for trainings on IT, OSCO 


If* 3208054. 09897 1 68902 


letfirolrjgy (IANT) 


Tell Ot 1 30SS100. F«: 30851103 


certification. PLC, VLS. ACAD, 


Email 0MoflaaWuie4*gmal am 


•Harduare Enoj.*NrjtrVOrt«7tg 


Email; nksOHLto « 


Pnoum3ttes. Behavior Sconce and 


Wet: www.wsomeclimiloaies.cOTi 


•Sotrware Engg. •fAjtmodO Tronrig 


Wili: www.tiii.co.in 


rtarkieraft. 




AhmeOatuO 




Bhopal 


EON Irifoiech Limited (TECHMOSclrorjl) 


W:079-32516577, 26607739 


WebellnicirmaticsUd 


Tr 1 07 55-2661 4 1 2 . 266 1 559 


TschnoSehooI is ttve most 


Fat: 079-26607739 


Webel Informatics Ltd (ML), a 


Fu 0755-4220022 


happening Training Centre for Red 


Email contact rjiantmoia.tan 


Government of West Bengal 


Email: cnspa-ensondia wm 


Hal (Unux- Open SouroeHn the 


Web- www.iartbnoia.coni 


Undortakfig, WIL B Rod Hat Training 


Web: www.cfE4iirKli4.com 


Northern Region. Wo aro futfy aware 




Paroiot and CISCO Regional 




Ol the Industry's reci urernont as our 


IPCC 


Htwwrt*ig/ta»d»wWll conduct 


Center tor Open Source Development 


Consonants are horn Linux industry. 


ftidfjjhg Gap with profeKSWnite- 


RHCE. RHCSS. CCNA. Hardware 


And Research 


We are committed to make you a 


LVL'<*m-A 


and Software courses . 


(.mux. open source S embedded 


total industry reedy Individual so thai 


W 0522-3919496 


Utah 


syswm tranrtg institute and 


your dreams ot a professional career 


Email: rpceikottyartoe.coin 


Tel: 03J-22833568, Mo We 09*33 1 1 1 1 10 
Emad: erviuuythwrWiii formates corn 


o\N<iorxrMni.Allrain«^prc«lctedby 


arefutwed. 


Wet wwwipcccom 


experienced aborts £ administrators 


Ch.ir-JlQLlfh 




Web: www.wetetintormatics.cOTt 


only. Quality trarmg loorporato and 


Tel 0172- b067566-«7, 2509649 


Koenig Solutions (P| Ltd 




inctviduafi. Wo mpauso in open 


Flic 01 72-261 5465 


A reputed Irarnng provider in Mcfa 




source sotuttonOur cost oflectwe 
business ready soLrUons caters ot of 


EmaM: aalo4fl4c1rrwisctKiol.net 


Authorised traMng partner ol Rod 
Hat. Norland Una ftotessional 


Training for Professionals 


Wee: Irttoi/technosctiocil rwt 




Wnd ol industry verticals 




irattrute. CWering trerning for RHCE. 


MM 


NewDet. 


GT Computer Hardware tngineeftng 


RHCSS. CLP. CLE, LP1 - 1 4 2. 


aem is the Best Certified Ftedhat 


MoMe: 09312506496 


Wlege(P)itd 


New OHM 


Training Parmer in Eastern India since 


Em W: mfc-ttdosor com 


Imparting training on Computer 


Mooile 09910710t43.F*c011 -25886909 


last 3 years. AEM conducted more 


Web: www.efcadr.corn 


Hardware NoftvoiWng. MobHo 


Ein*il:iriior^ic < f^joiu1><wioi)in 


Ban 500 RMC€ oxams with 85- 




PhcxieMnimonaricsAMMnatxxvTi 


Wat: wwwJnwicj-HM>ws-rom 


100% peas rate. Otnor courses- 


Cisconel Infotech {P) Ltd 


Coniltajtions 




rhcss,scna.mcse.ccna. 


Authorised Rod Hat Study cum Euan 


Jaipur 


NACS«3T 


Kotkata 


Centre. Courses Ottered: RHCE. 


Tet:OI41-3213378 


Wo are Prtyvioing Tiawng of UNUX to 


Tel: 031-25468738, MotJe 03830075018 


RHCSS. COW. MCSE 


Email- trenctiiie_cjlfJcrleOucetian.net 


FVototnaanat & Coopwaio. 


Emad: sirvhatuAml Qoma4 com 


KoMta 


Wee. www afeOucatroriTtet 


m 1 1 ii r 


Web: www aemk on) 


Tel: 033-25395508. McWt: 09831 70591 3 




let: 1 21 -2420567. Motile: 9997526668 




Email: inloCteHCOMtinfo.cotn 


HO. Career Development Centre 


Email: tmoenacsqlrjoal.com 


Agam Institute ol Technology 


Web: www oncofwiiniocom 


Btwpat 


Wet: www ruraototMl,COfn 


In Agam Institute ol Technology, we 




As the lountartieed of the most 




provide hardware and networking 


CMS Computer Institute 


slgrifcarrl pursui of hunan mind (IT). 


NACS mfesystems (P) Ltd 


Hiring since last 10 years. We 


Rod Hat Training partner wOlt 3 Red 


HO. atrortgry betowrjsv'Orty a Leader 


MACS is a orgarxtalion wtxti is 


apectetso in open source operating 


Hat CorWed FacuWes, Coco Cattled 


can transform you into a Loader" 


prevtding tr airing lor al international 


systems Iks Rod Hal Linux sine* we 


(CCNP) Facuty . 3 Mcroson CettHtod 


HCL CDC es a tcmvitttaifon of this 


Wrtffcotion. and also MACS Is the 


are their preferred training partners. 


Faculties having state Ot The Art IT 


oocponery»arxlaeciovvriicht«slje8n 


aumorteod Training F>artnoT ot Ftodhal 


MmIm 


Infrastructure Floxbto Batch Timings 


padectod over three decades. 


and atso having testing centre 


Tel: 01 35-267371 2. Mot*: 09760099050 


Available. .Leading Mecworking 


■taptl 


mTHOMSCtilPPIOMETFuCand 


Web: www aoamieanoia corn 


Institute in Marathwada 


let: 0755-4094852 


PEARSON VU6. 




Auranaabad 


Email: bmipalOhclcdC-m 


Meenrt 


Amrilha Institute ol Computer 
Technology 


Tel: 0240.3299509. 6621 775 


Web: www hclcrfc in 


let 1 21 -2767756. Far 1 21 -4006551 


Web: www croaurancaoM com 
311 j wwwLinuxFoiUcom 


FOSS ('•jllov/ r j tay«-j 


Mobile: 09697796603 
Eiruil »IOOna<sfliiyMI com. 
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moriilCftiacsgfobat.cfirn 



Nettliox Computing Systems 
Wo ore one-rt-aiand center lor 
oxcelonee and fnsjvng school 
focusing On g/Ourvj breaking 
technology «M*>pmort around 
dstrfbuted systems, networks, 
storage networks, vrtuaesatxxi and 
Iwidarnentai algorithms opbniJed fc* 
various apptance. 



MIKO-HMOrae 



HetMai-Tedinotogics 

Training Partner oi RedHa.Coco 



Tel: 01 72-200835 1 . 391 8556 
Erui: mall netmax©nma«\com 
Web. www firtmailKh.com 



nBfl\prf +**££( 

Netjpn instituted Advance 

HetwoAJno 

Netxprt Nona is a Leading 

otgarxzatxjn to prow* Open Source 

iranng on RedMat Uru> RHCT and 

RHCE Training VnthGOHrs. extra 

warn preparation moduto 

MM 

Tel: nt 20-4346647, Mob**: 0928882961 2 

EnuM: anoop.tfy aig ne laj rt i iHia.com 



Hetajoe tntotecn Services Pvt Lid 
Special batches lor MCSE, CCNA 
and RHCE on FtHEL 5 with exam 
prop module on My equipped labs 
ndudmg IBM servers, 20* routers 
and sweehe* e<c Weekend batches 
are also available. 
KM DM 

Tel: 01 1 -4601 5674. Moofe: 92 1 2 1 1 ttl 1 
Email: intettnetrorwmou net 

Neuron rT Solutions 

We ofJer end to end services and 

support to mplamer* and manage 



your fT Mrastructure needs We also 
oner Consuling services and Training 
in Advanced Unux ArJrrtnislratav. 



Mobile: 0979P96494B 
EmM: mqaoyCiwutonrtm 
Wet) www neuromi.Bi 

Plexus Software Security Systems 
Pvt Ltd 

Reno, ncorporffled n January 2003 
is successUy emerged as one of 
the best IT Company tor Networking, 
Meaaagjng & Security Solutions 
and Socunty Traning. Netwofcrig. 
Messaging ft Security solutions is 
coupled with the experts* ot its 
tranng: this has put Plexus in the 
umtiue posbon o( demtng synergies 
between Networking. Messagng 5 
Security Solutions and rT Trailing. 



Tel: 044-2433 7355 

E m U eaminjaplem j ce in 

web www pterio coin 

Professional Group of Education 
RHCH4HHCSSCen*C3»ons 



Tel: 0761 -W39076. 

Mo**: 09425152831 

Ema* Mriu vikMOgnuil com 

0-SOFI Systems S Solutions Pvt Ltd 
OSOFT is in a unique posfcon lor 
provktng tectrjcd eairmg roqjrod 
to become a Ina AdrrtretraSon 
under one rool. Snoe iKepticn, tie 
commitmsnl ot O-SOFT towards 
earing b outstsndng. We Tranon Sun 
Sotoris, Suse Lrux £ RedhM Lrut 



Tel: 080-26538297, 26544135. 22440507 
Met*: .919945287634 
Emai: ceuoelorsOesoftnM co in 
Web www qwliindii.com 

Software Technology Network 
STNlsonoollhemost 
acknowledged name in Software 
Development and Training. Apart 
from proviolng Software Solutions 
to various companies. STN Is et» 



awched n mparbng high-end prcjeci 
based training to students of MCA 
and B.Toch etc. of various institutes. 



Email: nfxintOwnl net 



Iet:OI72-50B66?9 

Email: stn200IOrrMil1rnW.com 



South Delhi Computer Centre 

SOCC is lor providng technical 

training courses (sottware. hardware. 

networking, graphics) with career 

courses me OC€ACC -O- and "A" 

Level and B.SOTMSc<rn.M.Teeh|Tn 

from KARMATAKA S TATE OPEN 

UNIVERSITY. 

MMOeH 

let 1 1 ■ 261 B332 7 . F l. o 1 1 -28143642 

E(iu4 HultKSHniconpWnxnMOgrnwi com. 

aMMeteomputercentreQrntmaicom. 

Web www.irwhufck) .com 

www.ifwtiiixkt.ori) 

SsylemsOuest 

Makkvg Tomorrow's proleesionals 

TODAY 



let; 080-4 1 301 Bl 4 

Email diredorY&ssysternsquest.coni 

Well: www rayjterraouefl mm 

Irimax FutuftPerfect 
A D»v of Timax IT Infrastructure and 
Services LimtOd. ROCtiot RHCE, 
RHCT Training & Exam Canter. 
MCTS, MCTTP. MCSE 03. CCNA. 
OCNP, Promotric Center. 



Id: 022-40681 313. Mobile 09987705638 
fan: 022-40681001 

Emnit: tuttu Epertectffrnnaii.ifl 
We*: www.triirm.iii 

Vibrant e Technologies Ltd 
Vibrant e Tecrnctogxs Ltd is a 
authorised Rod Hat Test and Testng 
Centre, has won the prestigious 
award - REDHAT BEST CERTIFIED 
TRAWtNG fWTTNER 200? -2008" lor 
Western region. Vibrant otters cwsos 
for RHCE 5. RHCSS etc 



Tel 022-2628506676701 



Ultramax Infonel lecfinilogies Pvt Ltd 
Trartng " <T related courses 
adn authorised testing cantor of 
Promeme. Vuo and Ftod Hat 



IH 022-67669217 



trash iiifrjiech 

AuSurked Training & Exam Center. 
Bost Pwloimn.} Center m Luckncw lor 
RHTcaning and Examnattons. LINUX 
&Cpen Source fraying institute tor 
IT pnofeasJanats & fjorporaie Oaertng 
Cuatty Trartng for RHCE. RHCSS, 
PHP. ShOl Script. vVtuateattjnara 
Trouhtaehootiig Toctivques & Tools. 



Tel: 0522-4043366. Fai: 0522-4043386 
Email yasbintotecb tkoa-gmaJ com 



Web Hosting 

IDS Logic Pvt ltd 

OS Lotto is a leedng mnovaave fT 

Sckisons compsny prowdes !>«■ 
Webrioet^.W«idowsVVobHctstrig. 
ApplcaHon Itoslno, Ftesota Hostug, 
Dorjcated Server, virtual Pnvate Server, 
Sarver Managornartl & Moneortng. 
ttimain Name Registfabcn, SSL 
CcrWeato. Corporate Msiiog SoUkkb. 
V*b Security SoUoris 
MMI 

M0 1 20-4235665. Fai: 01 20-4235665 
Email: kifoOidilogiccerri 
Wee: *ww l«wrtlwMinqc«m 

Pertcgl Inrxwatton 
WebHoslrigSpWee 

• web Hosting • Web Design 

• Web Applcatlon fJoveiopment 

• SMS Hosting • Corporate Hosting 



Tel: 04 1 3-3202726, 32*6999 

rnili MliiilaOiHliiiiliiioi[iii 
Web: nww.nebhasttngsoidercom 




Want to register your org^njsatjo_njn 
FOSS Yellow Pages For 

Call: Dhiraj (Delhi) 0981 1206582 Somaiati (Bangalore) 0998607571 7 
Of mail, dhiraj.khare@efyindia.com, somaiari.km@efyindia.com 



-gar 
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•Olfcr tor trrHK) period. 
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INTRODUCING KOENIG 

Koenig is en innovative and successful training company based in Delhi, India. Koenig is the pioneer and leader in Offshore Training, Offshore 
Training is a nother na me for Ed u cationo I Tourism w h ich i s grgwi ng al a very f ast pa ce j u st a s o Ihor "offshore' bu si nesses i n I ndia . 

Koenig now offers its IT training expertise (which has been tested at the international level) to the Indian corporate sector. 



KOENIG 




Latest Technologies 



Following aro the unique advantages of using Koenig: 



* Etchings Server 2010 

* SharoPoln 12010 

* SQL Sorvor 2008 



♦ CCNP (latest curriculum announced by C 

* Oracle 11g 

♦ Jav«E£6 

* AdotoeCM 

Niche and Specialized 
Technologies 

* Microsoft Dynamics (CRM. AX MAV) 

♦ Microsoft Offkt Communications Server 

♦ Mlcroson BIzTalk and Bl 

♦ SCCM, 3COM and Hyper -V 

* Powershnll 

* SHvorllght 

* InstallShMd 

• Cisco CANAC 

♦ Advanced BGP and MPLS 



Impeccable Credentials 

Koenkjts an Authortzod Training Partrwr of 
Mtaosofl. Cisco, Oracle, Red Hat Adobe, 
CIW, Novell. CWNP (only one In India), 
authorized testing Centre for Prometnc, VUE, 
Novell and Microsoft Cilice Specialist Exams . 

Koenig is the Winner ol Microsoft Citizenship 
Parmer ottfte Year award lor 2009. 

Koenig was ebo the Microsoft Partner of the 
Year Finalist lor 2006. 



Innovative Courses 

Hands-on Experience "* 

In Hands-on Experience™ participants apply 

the technologies team I in Ihe course and return 

pack as 'experienced' developors I IT 

professionals. 



1-on-1™ Training 

Koenig s award winning l-on-1 1 " training 
maximizes learning and saves time ol busy 
executives. The training can be lully 
customized and started from Any Dale 1 *. 



Holiday Experience 

Koenig otlent residential training In Goa, 
Shlmla and Dehradun. Accommodation, 
meals, airport pick-up, datfy transport, travel 
arrangamenls are all taken care ol by Koenig . 



Guaranteed to Run Classes 

Training programmes are Guaranteed to Run 
once a booking has been accepted Mo test 
minute course cancellations duo to Insufficient 

bookings. 



Lightening Fast Customer Response 

Our Sales stall is trained to respond quickly 
and comprehensively. All quenes are 
guaranteed a response within 24 hours 
(excepl holidays). 



Fixed Prices 

You get the best price in the very first Quote. 
You do not spend timo negotiating. Nor do you 
spend anything more than your competitor. 
Guaranteed. 



« CWMA and CWSP (Wireless) 
• Adobe Flex 



Try the Koenig experience 
You will find it different o«rf rewarding 



Microsoft 4) 



GOLD CERTIFIED 



W 



AUTHORIZED 




KOENIG 

ALL IT TAKES IS A GOOD TEACHER"* 



Novell 



Koenig Solutions Pvl Ltd. 20-A. Ilnd Floor. ShlvaJI Marg. Mod Nagar, New Delhi - 110015 (India) 
ALSO AT DEHRADUN. GOA AND SHIMLA 
WEBSl'i - www.koenlg-eolullont.com lnfo@koenla-solutione.com ♦ 91 99107 10143 (9 am to 5 pm, Mon to Fri) 
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EFYGROUP 



Q. With so many new colleges 
coming up how do I choose 
the right Engineering College? 



aWNch 

engineering 

stream shouta 

I pursue— 

electronics, 

computers 

OR telecom? 



aAre there 

j aiy engineering 

institutions 

that offer 

scholarships? 



a Which 
engineering 

coiteges 

offer the 

best facilities 

and faculty? 



CLlhsvean 
A1EEE score 
of 12,345— 
how do 1 find 
out the best 
engineering 
colegetorme? 



A. EDUTECH 2010. 

An Expo of Leading Engineering Colleges 



Reasons to be at Edirtech: 

• Organised by Electronics For 
You, a well known brand for 
more than 4 decades 

• 100 leading engineering col- 
leges have participated since 
the last 4 years 

• Edutech provides a blend of 
institutes right from guidance 
provider to innovative careers 
for upcoming vital years 



Unique forum for training, 
sharing and development. 
A 'one stop solution' expo 
for engineering aspirants 
Popular engineering courses at 
Edutech are: Mechnical, Elec- 
tronics, Marine, Civil, Telecom- 
munication, IT, Instrumenta- 
tion, Chemical, Textile, etc 



Key Facts: 

• Venue: Pragati Mai dan, 
Hall No. 15 

• Dates: 19th & 20th, June 2010 
■ Running successful for 5th 

year consecutively 



Hiiny! Book your stalls now 



To boot your boothi, call: 

Giiwm Saohikva— W87JWTO0 OR RajMii Singh-OKI 2151110 

OR call M on 011-fSt19fO143 ORvMt www.wiutoeti.eofn 




19-20 JUNE '10, NEW DELHI 
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